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Coping With COMPUTIST 



Welcome to COMPUTIST, a publication 
devoted to the serious user of Apple ][ aDd 
Apple ][ compatible goniputers. Our magazine 
contains information you are not likely to find 
ill any of the oilier major journals dedicated lo 
the Apple market. 

New readers are advised to read this page 
careftiUy to avoid fmstration v^hen attempting 
to follow a sofikey or when entering tiie 
programs printed in this issue. 

■ What Is A Softkey Anyway? Softkey is 
a lenii whiclt we coined to describe a procedure 
that removes, or at least circumvents, any copy- 
protection on a particular disk. Once a softkey 
procedure has been performed, the resulting 
disk can usually be copied by die use of Apple's 
COPYA program fon the DOS 3.3 System 
Master Disk), 

■ ConuDtindsj And Controls; In any article 
appearing in COMPUTTST, commands which 
a reader is required to perform are set apart by 
being in boldface and indented: 

The iBEiURnl key must be pressed at the end of 
every such command unless otherwise 
specified. 
Control characters are specially boxed: 



Press {W}. Next, place one finger oa Icvhl] 
and press \W\. Rememb er to enter this 
command line by pressing iRnUBHl . 

■ Requirements: COMPUTIST programs 
and sofilceys require one of the Apple ][ series 
of computers and a disk drive with DOS 3.3. 
These and other special needs are listed at the 
beginning of the article under "Requirements". 

■ Software Recommentliitiunii: 

1) Appiesofi Program Editor such as Global 
Program Line Editor (GPLE). 

2) Sector Editor such as DiskEdit (from the 
Book of Softkeys vol I) or ZAP from Bag of 
Tricks, 

3} Dixk Searrh Utility such as The 
Inspector, The CIA or The CORE Disk 
Searcher (from the Book of Softkeys vol H). 

4) Assembler such as the S-C Assembler 
from S-C software or Merlin/Big Mae. 

5) Bit Copy Program such as Copy ][ PIils, 
Lock.smith or The Essential Data Duplicator 

6) Text Editor (that produces normal 
sequential text files) such as Applewriter H. 
Magic Window U or Screenwriter 11, 

COPYA. FID and MUFFIN from the DOS 
3.3 System Master Disk arc also useful. 

■ Super lOB: This powerful dcprotection 
utility (COMPUTIST 32) and its various 
controllers are used in many softkeys. This 
utility is now available on each Super lOB 
Collection disk. 

■ RESKT Into The Monitor: Softkeys 
occasionally require the user to stop the 
execution of a copy -protected program and 
directly enter the Apple's system monitor, 
fiheck the following list to see what hardware 
you will need to obtain this ability. 



Apple ][ Plus - Apple lie - Apple cnmpatihles: 
1) Place an Integer BASIC ROM card in one 
of the Apple slots. 2) U.se a non-maskable 
interrupt (NMI) card such as Replay or 
Wildt;ard. 

Apple j[ Plus - Apple compatibles: 1 ) Install 
an F8 ROM with a modified RESET vector on 
the computer's motherboard as detailed in the 
"Modified ROM's" article (COMPUTIST 6 
or Book Of Softkeys US) or the "Dual ROM's' ' 
article (COMPUTIST 19). 

Apple l/e - Apple Ik: Install a modified CD 
ROM on the computer's motherboard. Cutting 
tdgc Ent, (Box 43234 Ren Ccn Station-HC; 
Detroit, Ml 48243) sells a hardware device 
that will give you this important ability but it 
will void an Apple //c warranty, 

■ Recommended Literature: The Apple J| 
Reference Manual and DOS 3.3 manual are 
musts for any serious Apple user. OUier helpful 
books include: Beneath Apple DOS, Don Worth 
and Pieter Lechner, Quality Software: Assembly 
Language For The Appiesofi Programmer, Roy 
Meyers and C.W. Pirdey, Addison Wesley; and 
Wfmi's Where In The Apple, William Lubert, 
Micro Ink, 

■ Keying In Applesoft Progr^ns; BASIC 

programs are printed in COMPUTIST in a 
format that is designed to minimize errors for 
readers who key in these prc^ams. If you type: 

l«HOME:HEMCLEAR SCREEN 
The UST will look Uke: 

18 HOME ; REM CLEAR SCREEN 
because Applesoft inserts spaces into a program 
listing before and alter every command word 
or mathematical operator. These spaces usually 
don' I pose a problem except hi line numbers 
which contain REM or DATA commands. 
There are two types of spaces: those Ihai have 
to be keyed and those diai don't. Spaces that 
must be keyed in appear in COMPUTIST as 
delta characters (''' ). All other space.'; are there 
for easier re.ading. NOTE: If you want your 
checksums (See "Computing Checksums" 
secdon) to match up, you tnusi only key in 
C ) spaces after DATA statements. 

H Keying In Tlexdumps: Machine language 
programs are primed in COMPU I'lST as both 
source code and hexdumps. Hexdumps are the 
shortest and easiest format to type in. You must 
first enter the monitor: 

CALL 451 

Key in the hexdump exactly as it appears in 
the magazine, ignoring the four-digit checksum 
at the end of each line (a "$" and four digits). 
A beep means you have typed somediing that 
the monitor didn't understand and must, 
therefore, retype that line. 

When finished, return to BASIC with: 

BSAVE the program with the correct filename, 
address and length parametera given in the 
article, 

■ Keying In Sbiirce Code The source code 
is printed to lielp explaui a program's operation. 
To key it in, you will need the S-C Assembler. 



Without this assembler, you will have to 
translate pieces of the source code into 
something your assembler will understand. A 
table of S-C Assembler directives appears in 
COMPUTIST 17. 

■ Computing Checksums Checksums are 
four-digit hexadecimal numbers which tell if 
you keyed a program exactly as it appears in 
COMPUTIST. There are two types of 
checksums: one created by the CHECKBIN 
program (for machine language programs) and 
the other crtaited by the CHECKSOFI" program 
(for BASIC program.t). Both appeared in 
COMPUTIST 1 and The Best of Hardcore 
Computing. An update to CHECKSOFT 
appeared in COMPUTIST 18. If die published 
checksums do not match those created hy your 
computer, then you typed the program 
incorrectly . The line where the first checksum 
differs hus an error. 

■ CHECKSOFT Instructions: 

LOAD filename 
BRUNCHECKSOfT 



Get the checksums with: &[ffifDm] and correct 
the program where the checksums differ, 
■ CHECKBIM Instructions: 

CALL -151 

liLOAD program filename 

Install CI-IECKBIN at an out of the way place 

BRUN CnECKDIN,AS6W» 

Get the checksums by typir^ the starting 
address, a pcritJdarid ending address of the fUc 
followed by a I^Vl (r<n-URH| . 

sxx.xxx i3Yl 

Correct the line^ at which the checksums differ. 
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You have a LEGAL RIGHT 
to an unlocked backup copy 

Our editorial policy is that we do HOT ctindone 
software piraqf, but we do believe that users are entitled 
to backup caramercial dliks 1h«y htive purchased. In 
addition to the security of a tiacKup disk, the removal 
of copy-protection gives the user Ihe option at 
modifying programs tr> me«t his ar her ns^ds. 

Funiiennore, the copyright laws guBrinie« your 

right to aucti a DEPROTECTED backup cofy: 

,,-"ll is not an infritigeciwnt for Iht owuci of a topy uf j 
^ucnpLlLul p^^nmi Lu iiidki: ipr uuihonzEf I}h: milking [if iinE>thrr 
copy ur ailaptaliaa uf thul ucimpulifr prngT;]ni pmvldcd: 

1) iHnE siirfi fl new copy or adeptatioo is crested as an cs^mtit^ 
mp In [he utiliiatlcii of the computer program In cqujimction with 
a macliine and thai it is Uicd in no othcT maracr. or 

2.1 thai such mij copy ot adaptalmti m tat archival purposes 
only aial liuiE ail jrrihivai ccipEEi^ UTe ijesrrrryed in tli? evum That 

i:om)nued possession of the rompulcr program should cciisc to 
be righiAii. 

My CMCt cofMej pTx:parad in accordance vith (he provisions 
of this stciion may be leased^ sold, or otherwise transferred, ahatg 
WJtii [l£ CCF^y limti wiuLti SLicli aipiL;^ wen^ pt^peued. only ait psn 
of the le,ise, fl-iie. or other tmnsfer of all rights in ih: program. 
Adapraooiw so prepared may be irHisfemd only with the 
autlioriEalion of Ihc copyristil owner. ' 

Vniisd Sims Codt litlt I?, ill? tl7 USC !l7i 
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HAPPY HOLIDATSI HAPPY HOLIDAYS! 

In light of the upcoming holiday season, COMPUTISThas decided to run a series of specials for our readers. 
Tlie following pages contain a set of specials that were conceived with our special readership in mind. To take 
advantage of any of these offers, please refer to the special code in each box when ordering. Please hurry though, 
offers are only good while supplies last and expire on December 3J, 1986. 



x-se.01 



FREE coior-codedtibrary case 

with the purchase of 10 blank floppy disks. 



DISK PRICES fmdudes shipping) 

U.S. JJfJ, 

Canada & Mexico $11, 

Other Foreign $15 

/nd»des tijvek sheoes. hub nngs. 
labels, and writ^-prcte^l tctbs 



SAVE AS MUCH AS $ 1 9 . 75 

on back issues when purchased in quantities of 3. 



SatepMce U.S. /Canada/Mexico $10 
Suit price, other foreign $20 

Reaular prices $4.?fi and $13 25. respectiuelij. 



XS6-0I 



SAVE $19.75 on. CiBrary (fisfo 

»S^ ^et a FREE coior-coded cose 

with the purchase of 5 librari^ disks. 

That rrjeons, vi>u yet 5 iibrur!.,' disk^ and a Jree co!or.coded ca^e for oni}; $30.00. 
f Foreign orders odd S5.00 shipping & handling} 

lingular prices are U.S. /Canada/ Mexico $9.95 per dteft 
and other foreign $11 94 per disk. 



X.S&W 



SAVE $5/$ 8 

Save $5 on the price of Volume II of the 
Book of So///ceys, or saue $8 on the total price 
of both uolunne 1 &2 when purchased together. 

Sale Prices: Vol 11 $12.'}$. BOTH $22.90 
Regular Prices: Vol I! $17.95. Vol Jf $30.90 

Shippii\g ' US/Carmdzi /Mexico $2 per hooic 
Shipping other /orpf^n $5 pe.r baok 



X-8&03 



SAVE $3 on every 
back issue & ^k combo. 

With this special onlx; 9.95 per set. 
(That's like getting a free back issue usith every library disk.) 

Normal retail pnce HZ. 95 per set. 
Foreign shipping add $3.00. 



Get a FREE Core SpecioC 

or FREE COMPUTIST 

T-sfiirt 

with any total order of $100.00 or more. 



Yes J want to take advantage of \/our special Holidax; offers. Enclosed is U.S. funds (drawn on U.S. bank) to cover rjjy order. 

Piease send me sets of 10 floppy disks, t understand that I will get a FREE color coded disk case with each set. 

Sale Price: U.S. $10, Canada/Mexico $11, Other Foreign $15 per set. 



I want to take advantage of the Book of Softkeys special prices. 

D Please send me volums 11 of the book of softkeys. Enclosed is 12. 95 plus shipping & handling. (U S Canada & 
Mexico add $2. Other Foreign add $5). 

D Pfease send me Both uolume I and volume H of the book of softkeys. Enclosed is $22. 90 plus shippina <& hanidlinq 
(U.S.. Canada & Mexico add $4. Other Foreign add $10). 



For rennaining holiday sales, please consult 'Back Issues and Library Disks' order form on page 32. 

Send orders to: COMPUTIST PO Box 110846-T Tacoma, WA 98411 
Name y£5# 

Address 

Citi) 



State 



Zip 



Country 



Phone 



-Exp. 



Signature. 



.CP38 



U.3. fmidE tliawn on U.S benk In Washington add 7.8% sales tax. Motti ordera ahipped UPS 30 please use street address. Oiler gnod while Buppllea last. 



announcing new rates! 



YES! COMPUTIST has DRQpp^j. 
its annual subscription rate. 

U. S. Domestic save $S per year 

U. S. First Class save $3 per year 

Canada and Mexico save $23 per year 

All other foreign save $45 per year 



Additionally;, COMPUTIST has 

incorporated a combination hbaravi; 

disk and first class subscription rate 

to save \;ou even more. 

With this new 'COMBO' 
subscription, you will receive each 

monthly issue AND it's 

corresponding librarij disk for as 

much as 43% off the individual 

rate. Combination subscriptions 

are sent U.S. First Class mail. 

If you have at least 3 issues left on 

your current subscription, you can 

upgrade to this special offer. 



Yes I want to take advantage of the big money saving offer and subKcribt; 
to your fine publication. En;;lust;d are U.S. Funds (drawn on a U.S. bank) 
for a 12 issue subscription. 
D New Subscriber □ Please renew my subscription 

D U.S. S32 U U.S. First Class/Canada/ Mexico S45 H Other Foreign $75 

Combination magazine and corresponding disk subscriptions 
D U.S. /Canada/Mexico SlOO U Other Foreign $140 

To upgrade your subscription to a combo subscription, U.S. /Canada/Mexico 
send S5.50 and other Foreign send $6.50 per remaining issue. You must have 
at least 3 issues remaining to take advantage of this upgrade offer. 



Name 

Address _ 

City 

Country 



.ID#. 



State 



Zip 



Phone 



.Exp. 



Signatu re ^ CP3 8 

U.S. Funds drawn on U.S. bank. Subscription will not commence until funds 
are received. Send orders to: COMPUflST PO Box 1I0846-T Tacoma. WA 98411 



Ol^ OCtti ! Il'e realty mean it. This is truly a big deal. We want to sell you a book or two. need we say more? 

The Book Of Softkeys 



Volume I ($12.95) 



contains suflkeys for: Akalabeth | Ampermagic | Apple Galaxian 
Aztec I Bag of Tricks | Bill Budge's Trilogy | Buzzard Bait 
Cannonbail Blitz | Casino | Data Reporter ] Deadline | Disk 
Organizer 11 | Egbert 11 Communications Disk [ Hard Hat Mack 
Home Accountant | Home word | Lancaster | Magic Window II 
Multi-disk Catalog | Multiplan | Pest Patrol | Prisoner 11 1 Sammy 
Liglilfool I Screen Writer D | Sneakers | .Spy's Demise 1 Starcross 
Suspcndetl | Ullima II | Visifde | Visiplot j Visilrend | Witness 
Wizardry | Zork I | Zork II | Zork III 1 PLUS haw -to articles and 
program listings of need-to-have programs used to make unprotected 
backups. 



Volume II ($17.95) 



contains softkeys fori Apple Cider Spider i Apple Lugo | Arcade 
Machine | Tiie Artist | Bank Street Writer | Cannonbail Blitz | Canyon 
Climber 1 Caverns of Freitag | Crash, Crumble & Chomp | Data 
Factory 5,0 | DB Muster ! Tlie Dic*tion*ary | Essential Data Duplicator 
I & III I Gold Rush I Krcll Logo | Legacy of Llylgamyn | Mask Of 
The Sun | Minit Man | Mouskattack | Music Construction Set i Oil's 
Well I Pandora '.s Box | Robotron | Sammy Lightfoot | Screenwriter 
Q v2-2 1 Sensible Speller 4,0, 4.flc, 4. Ic | the Spy Strikes Back | Time 
Zone V 1 , 1 I Visible Computer: 6502 | 'Visidex | Visiterm | Zaxxon | 
Hayden Software | Sierra Online Software | PLUS the complete listing 
of the ultimate cracking program., .Super lOB 1,5 j and more! 



To Order: Send $17.95 + Shipping and Handling for Volume II and/or $12,95 + S&H for Volume 1. Shipping and handling is 
$2.00 per book for US orders. $5.00 per book for foreign orders. U.S. funds drawn on U.S. banks only, Washington State orders 
add 7.8% sales tax. Send your orders to; Soft Key PublUbing, PO Bos 110937-BK, Tacoma, WA 98411 
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Giuj/hivi friim Baniam Elecironic'j "I, Damiaito" 



Address all advertlsUig inqgiiles 10 COMPUTIST, rtdvertiaing 

DBpartment, PO Box llOflfe, Tacoma, WA 88411. Malt 
fTianuticriptE or rnquesls for Wnter'5 Guides to COMPUTIST, PO 
Box 110346-K, Tocoma, WA3B111. 

Unsollctled manuscripts are assumed In be submitted for 
putJlicalion al our stafitJajd rales of paymsnl. SoftKey publish! ng 
purcliaueB all and exclusive ciGni^. Tor rnors information on 
subrTiillln§ mariuBcripEs, see our writer's guide. 

Entire cotilents oopyrlglil 1986 by SoftKey Publlsfling. All 
rights reserved. Copying done tnr nther than persimal or intornal 
tBteronce (without express written pBrmlsslon from Ihe pubflsher) 
Is prohlbiiefl. 

The ediloriai fitaKaesumes no Ijahillty or responsibility for the 
products ad\/flrtisfiri ir> the meaezice- Any opinions expressed 
by the authors are not necessarily I hose ol COMPUTIST 
maoaiine or SoftKey Publishing, 

Apple usually refers [o an Apple ][ computer and is a trademark 
of AppEo Computers, inc, 

SUBSCHIPTIONSi Rates (for 13 issuesj: US 13?, US 1st 
Class, Canada & Mexico S4&, Fnnsign $75 Direct inquiries to; 
COMPUTIST, Subsijrlptlon Departmaw, PO Box IIOB46-I. 
facomo, WA 93411, Please include address labul witti 
crjrtespondence. 

DOMESTIC DIALER RATES' Call (206) <l74-S7St) far more 
information. 

Charge Of Address' Please allow 4 weeke lor change of 
address to take eltecl. On postal foim 3S7G supply your new 
addrass and your rrtost recot^L nddre^^s label Issues missed due 
10 non-receipr of change of address may be acquired ^t Ihe 
regular back issue rate. 



PublLshcr/Edhnr: Charlra R llaigtir ,'k)aRa^ng bdilur; Ray Darrah 

Tmhnical tiHtor: Rolnin Knuwles ClrtulBtlotl! Debbie llolloway 

AUvtrtiKbig; (206) 474-5750 Prtotlne; Valco Uroptiics Inc.. Scalllc. WA 

COMfUTIST is jubJisiMrf monihty b^ SufiKi!.v Publistiin^. 5231 S W,«hinj(toii. Tacoma, WA VHW) 

Plioiis; (206) 474.S75U 

softkeys: 
14 Cyclod 

hy Felix Ij'Chat 

19 Alternate Reality 

hy Stephen Luu 

24 Boulder Dash I A II 

hy Ramiy R. Abe! 

25 Hard Hat Mack (Revisited) 

by Brian Truha 

26 The Other Side 

/j.v Dick Meikle and Jim McGreevy 

feature: 
10 The Enhanced /Unenhanced A/e 

Have you ever wished for a moment (perhap.s when running some old software) that your 
Apple //e wasn't enhanced? With tlits modincalion to your coinputer, you can quickly switch 
between enhanced yiid u^t^nhanccd versions of the Apple //e. by Wes fdtY 

28 Looking into Flight Simulator's DOS 

Following our soflkey for Flight Simtilator v 1.05, COMPUTIST presents an in depth look 
at the DOS behind the program, by Stephen L. FavpT 

core: 

16 Appavarex 

This article details a how Applesoft program text is stored in memory and presents a program 
that documents in what lines of a program variables are used, by Elwood J. C. Kuretli 

20 Installing a RAM disk into DOS 3.3 

If you have a //e with extended 80 coltimn card, you can now have the super Speed" of a 
RAM disk with DOS 3.3. by Robert Knowlcs 

departments: 

4 input 

6 Most Wanted List 

7 Readers' Softkey A Copy Exchange 

MicroProse's F-15 Strike Eagle t^y John Howard. Brodcrbuiid's Championship Lode 
Runner hy Sandy Euhanks, Spectrum Hoiobyte's Gato V1.3 iy Robert Muir, Bantam's 
I, Damiano by Larry Ratulo, Intuit's Quicken by Greg Robinson, Electric Transit's 
Wilderness by Charles Taylor, One Step's Golfs Best by John Howard 



Please address letters to: 

COMPUTIST 

Editorial Department 

PO Box 1 1 0846~K 

Tacoma, WA 9841 1 



Include your name, address and 
phone number. 

Correspondence appearing in the 
INPUT section may be edited for 
clarity and space requirements. In 
addition, because of tfie great 
number of letters that we receive and 
the small size of our staff, a response 
to each letter Is not guaranteed. 

Our technical staff is available for 
phone calls betvi'een 1:30 pm and 
4:30 pm (PST) on Tuesdays and 
Thursdays only. 

Opinions expressed are not 
necessarily those of COMPUTIST or 
SoftKey Publishing 



Silent Service News 



I only have one disk. Business or 
Recreational, that has resisted all (ifforis lo back 
up. InL-ludiiig Ehe use of COMPUTIST articles. 
EDD HI, COPY ][ Plus, and a couple of older 
copy disks. This one is Silent Service by 
Microprose. A starting place is a de protection 
method that appeared in COMPUTIST that 
partially works. However the deprotected 
versiwi will run at a different level than you 
select. Bven worse, a copy will always cause 
the submarine to hit an enemy mine and then 
sink. Having played many times on the original 
without ever hitting an enemy mine 1 can only 
conclude that the program counts cycles or 
key presses on the copy. (Or perhaps my Apple 
just dislikes the copy, J 

A quick way to tell is to piay selection 2 
under Convoy Actions, sink a couple of the 
ships and try to escape. If the copy is 
unsuccessful you will hit the mine. If you are 
playing the original disk the scenario will end 
by giving the readout of your accomplishments . 
(Assuming, of course that the destroyer docs 
not send voti to the bottom.) 



Sheldon M, Attcrbury 
Sierra Madrc, CA 



Arcade Boot Camp Softkey 



Requirements: 

Arcade Boot Camp 
The Senior Prom 
A blank disk 

If you (tor some strange reason or anotlier) 
don't have the Senior Prom you will need to 
use a copy program that will allow modification 
of Address and Data Prolog bytes for the 
copying process. 

Penguin software was very kind to provide 
Softdisk (a monthly magazine on disk) with the 
privilege lo put a 1984 program (a fine quality 
commercial one at that!) called Arcade Boot 
Camp with the other programs and information 
they provide monthly. 

I was almost overjoyed. 

The joy I felt, however, was nothing 
compared to the joy I felt when I unleased the 
power of The Senior Prom. 

How 1 did it: 

The first thing 1 did witli Arcade Boot Camp 
was to find out how the data on the disk was 
perverted. I used tlie sector editor in the Senior 
Prom, called Snoopy and the Doctor (SAND) . 
Pressing "N" does a nibtile read and gives me 
a hex output of exactly what is on the disk. I 
found that the first Address Piolog byte was 
changed to $D4 on every odd numbered track 
(ic: 1. 3, 5, 7, etc). The second thing to do 
was to simply copy every other (odd) track with 
the first address Prolog byte changed to SD4. 
Then copy all even tracks with normal Prolog 
bytes. This task is extremely simple with The 
Senior Prom's "Alter Prolog Bytes" function. 
It can also be done with COPY A, Super lOB, 
and so forth. 

After 1 did this, lealizing by the (now 
unusual) appearance of the Applesoft prompt. 
This means Applcsofl is being used (usually, 
but now rarely) and as well DOS !?.3! As it turns 
out. the catalog sector is at track $11 and the 
VTOC is nonnal. So all that this disk needs now 
is good old DOS 3.3 copied to tracks $00-S92- 
And it works!! 

With the above information and as well, 
inforraution from past COMPUTIST issues it 
is very easy to copy Arcade Boot Camp. 

John Einstein 
Anchorage. AK 



Hitchhiker Tip 



First, i would like to conjiratulate you on an 
excellent magazine! I started my subscription 
in December and only have 2 issues left. My 
budget is at zero right now and 1 hope 1 find 
some way to save up some money and renew 
my subscription .soon. Keep up the good work! 

1 also have one mure thing to say, (unrelated, 
but useful). In Hitchhiker's Guide to the 
Galaxy, after you have gotten the Nutrimat- 
Computer Interface, don't hook it up until you 
hook up the Improbability drive to the console 
hy plugging the large pltig into the large 
rcccpticle. After that, go hook up the Interface 
to the Nutrimat, (you have to take out the old 
board first), activate it, run up to the bridge, 
and wait until Eddie announces that the ship is 
going to be destroyed then activate the drive. 
If anyone can help me after that point , please 
write lo: 

Chris Wood 

1220 S. Sixth St 

Rockford, IL 61109 



On Ultimainland Editor... 

I have a couple of siiggesdons for the Ultima 
fV Mainland Editor you printed in 
COMPUTIST No. 33. 

• To make tlie mountains really .stand out from 
the rest of the mainland, add a ":POKE 
947,42" to the end of line #1 10. This turns 
them inverse on the screen. Wlien adding 
mountains using this option, the mountain will 
be a normal asterisk until you scroll it off & 
back on the screen agaui. It will then be inverse, 

• It might be an idea to show the readers how 
to customize the program so that if they wanted 
to be able to add things to the surface that are 
currently not available, they could. (For 
example: boats > horses, stone pillars, etc) 

Secondly, for those folks who have 
Microftose's Nato Commander, here is a 
short softkey for it (I haven't had the time 
recently to do a proper writeup). 

1) Use the Locksmith fast copy program to copy 
the original onto a blank. Any copy program 
that can ignore bad tracks will work fine. By 
the way, this procedure will only work if Track 
%m is the "bad" track. 

2) Get out your favorite sector editor and make 
the following changes to the copy; 
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TRACK 


SECTOR 


BYTE 


FROM TO 


S04 


$04 


$57-58 


B0 06 18 EA 


$04 


$04 


$5B-5C 


C5 2E C9 05 


$04 


$04 


S70 


F0 DB 



Write protect the backup (for safety's sake) and 
hide the original. 

Jim S. Hart 
Jacksonville, NC 

Mr. Hart: Thank ynu for your suggestion!: 
on Ultimainkmd Editor. The Bug you rnentioned 
(edited from thix letter) appeared in 
COMPUTIST No. 37. 



Some APT's 

I just rec-eived COMPUTISI' for the first 
time and thought it was great, and I will stop 
subscribing to some oUier luugaziufis to get 
yours. Whiie I was reading Input, 1 saw an APT 
for Conan, by Kecuiy Klioo (COMPUTIST No, 
32) and I tried it but it didn't work. 

I do have a different one for Co nan. When 
you get to tlie tltird screen, go down the ladder, 
but be caretul you don't get eaten by the ants, 
and get the elevator or wliaiever it is to the lop 
level. When you get there move over till you 
get near the tree and wail for the Avian Ally 
to come. It looks like a bird and if you jump 
and hit it, you will get an extra life. This only 
works once. Also on the fourth screen you get 
the key, a lot of swords, and an extra gem. This 
will be helpful for the next screen. 

I also have one for Miner 2t>49er. Before you 
start playing the computer asks you how many 
players. Type in "# " and then the level number 
you want to be on. You can only do this witli 
one player. In Hard Hat Mack do the same thing 
except don't type in "#", just the level number. 

Here's one for Sea D ragon, Before you start 
the game just hit B.T I and you will have 9999 
air instead of the usual 6000. 

Phillip Lai 
Lincoln, RI 



A Diflferent Fautarision 



Enclosed you will find a check for a 
subscription to the Best Apple magazine t have 
ever read. I normally buy your magazine at the 
news land but after reading about your 
circulation problem I decided to subscribe. 



(Incidentally, one touches my COMPUTIST 
under penally of severe bodily harm.) 

Now down to the major reason for this fetter. 
Alter purcha.sing a copy of Famavision I 
inunediately went lo COMPUTIST No. 30 for 
Mike Saul's .softkey. I followed all the 
directions tor creating FVSTUFF, typed in the 
controller, started it up, and it bombed while 
trying to read the fn-st sector. On examination 
of the disk with a nibble editor I found diat the 
epilog marks on my copy were not the same 
as his. In addition, the epilog marks nn the 
"authorized" copy (SDE $FF for address, SDE 
$AA for data) were different than the epilog 
marks on the original disk ($FF SFF for address 
and data). To copy the original disk I had to 
change line 1 130 in ilie controller to read: 

1138 DATA 255,255,255,255 

To copy the ' ' authorized ' ' backup line 1 1 30 had 
to be changed to: 

1130 DATA 222,255,222,17« 

The ri^t of the softkey went like clockwork. 
Apparently, Broderbund installed minor 
differences in several of dieir Fantavision disks, 

1 would venture to say thai if my copy is 
different Irorn Mike Saul's, then there are 
probably more out there with different marks 
yet, I suggest that if you have trouble with the 
softkey, boot up a nibble editor and see what 
epilog marks you have got. 

Thanks for the great magazine and keep die 
softkeys coming. 

Jose A. Momano 
Albuquerque, NM 



More on SSI RDOS 



Mr, McConnell's article about SSI's RDOS 
was both thorough and quite interesting. Since 
he invites for additional information regarding 
this topic, I'd like to contribute the following; 

1) SSI has recently been using a Ibuirh type of 
secondary' protection. I've encounieied this in 
two 1985 releases - Battle of Aniietam and 
Battle Group, The protection involves what is 
essentially a nibble count of track 0. 

In Battle of AiHietam, it can be found in side 
2, track 22, sector 2, beginning at byte 04. It 
goes under a fdename of "J" . In Battle Group, 
it can be found in side L track 22, sector 4, 
also at byte 04 It goes under a filename of 
"Arsenal". In other software, if the same 
routine is used, it can be found by searching 
for these bytes: CE »7 02 EF 07 02. Some of 



your readers will recogni;£e this as typical self- 
modifying code. They would be entirely 
correct; and that is why the routine is a little 
hard to find if you don't know what to look for. 
It can be defeated by editing byte 04 of the 
sector from CF to 60 (an RTS) Meanwhile, 
tlie Qwerty file is still in the disk, but the 
protection routine is disabled. It's unnecessary 
to make the edits described in your article; 
perhaps the fde had been left in the disk to duow 
off those who aren't aware that SSI had been 
using a new secondary protection. 

2) I've also seen two recent releases, apparently 
produced by SSI jointly with a certain LDW 
Software, written in 16 sectors, and their 
protection is very light. These are Panzer 
Grenadier and NAM, The first byte of their 
address prologue alternates between D5 (on 
odd-numbered tracks) and D4 (on even tracks), 
very much like die Penguin format. The address 
epilog i.s also not normaL But all other marks 
are standard. 

This can be cracked using COPY A. After 
running COFYA. reset first, go into monitor 
with a CALL - 151, and enter; 

TV954:4A 49 6A D« EF 

B993-M 

B99B:«0 Fe 

Then restart the COPYA by entering RUN 
80, and you're offl The normalized copy should 
run without need of any further edits. 

3) Wlien the skew of Ihe RDOS 3.3 disk is 
changed to ' 'ascending 1 " , the skew of tiack 
should not be changed from ("descending 
02"). The boot will be faster. 

4) In creating the RDOS 3.3, shouldn't the 
changes listed in your article include 7CCD:BF 
N 7CD1:BF? 

Francisco Viliaroman 
Philippines 



The Jenny Scandal 

In COMPUTIST No. 29 Phil Pattengale 
suggested using die swap controller to deproiect 
Jenny of the Prarie. Unfortunately, more was 
needed on my disk. 

After using the swap controller, my disk 
would crash right after the tide screen. Using 
my Wildcard to enter the monitor at the point 
of tlie crash, I found the following interesting 
code. 

4AF9:4C F9 4A JMP S4AF9 

Now I'm no machine language wizard, but 
even 1 can sec an intiiiite loop that's diis 
obvious. 
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I then just scanned the disk for those three 
byles aiiJ lound lliem at track $IA, sector 01, 
byte C8. I then changed the F9 to FC to bypass 
the infinite loop and I had a perfectly working 
copy. 

Gregory L- Moor, M.D. 
FPO New York, NY 



Spy's Demise APT's 



Location $60AB holds the number of men 
the game is initialized with. You can change 
this to any value less than $7F, Either load, 
change, and save the appropriate file or search 
Uie disk for die byles $A9 $05 $85 $27 $85 $17. 
Change the second byte in this sequeace to the 
number of men you would like. 

Location $17 contains the ntimher of men lef* 
during actual play. Do a NMi and change this 
location if you suddenly find yourself 
shonhandcd. Again, please respect the $7F 
limit 

By the way, the Senior Prom is a hacker's 
wet dream. Any aspirinj; Cracking Captain 
should be advised to beg, hormw, or pawn their 
graiidciiother for one of diese. 

David Todd 
Cambridge, MD 




Boxed in the next column is this month's 
"Mystery Hexdump." You may have noticed 
Hexdumps appearing in previous issues of 
COMPU riS r with no explanation us to what 
they are or where they came irom. The first 
of these was in COMPUTIST No. 35 on page 
29, 

Search your back issues for these strange and 
elusive hexdump.s. You never can be quite sure 
as to what they will do. 

This months "Mystery Hexdump" becomes 
a normal BASIC program that can be RUN. A 
word of warning though, do NOT attempt to 
edit any lines of the program or you will turn 
into a birdcage liner! 

Look for more of thest- bizarre hexdumps in 
future issues of COMPUTIST. The results 
could be wild. 



0800 


00 24 08 0A 00 86 52 4£ 


S35C9 


0808 


44 28 34 29 3A 81 44 41 


$F77e 


mm 


54 41 D0 30 CI 34 3A 87 


S92AF 


0818 


52 4E 44 28 44 41 54 41 


SAD4E 


0820 


29 3A 82 00 44 08 14 00 


SF0C0 


082S 


47 45 54 D0 C9 31 36 33 


S159Q 


0830 


38 34 3A 48 54 41 42 D0 


S4E01 


0838 


31 34 30 3A 56 5t 41 42 


$3309 


0840 


D0 39 36 00 86 08 IE 00 


$FDE3 


0848 


97 3A BA 22 53 4F 4C 41 


$0305 


0850 


52 20 50 52 49 4E 54 53 


$95AB 


0358 


3A 22 3A A2 34 3A 84 22 


S5529 


0850 


4E 55 4D 42 45 52 20 4F 


S5062 


0868 


46 20 50 52 49 4E 54 20 


S3FC5 


0870 


28 33 2E 32 20 49 53 20 


$65E8 


0878 


47 4F 4F 44 29 3F 22 3B 


$0946 


0880 


50 52 49 4E 54 00 C2 08 


J065F 


0888 


28 00 BA 3A 84 22 53 50 


$58F2 


0850 


45 45 44 20 28 31 20 35 


$911A 


0898 


30 30 2C 20 31 30 30 20 


$E703 


08A0 


49 53 20 47 4F 4F 44 29 


$BC9A 


08A8 


3F 22 3B 53 50 45 45 44 


$6A3F 


08B0 


3A 53 50 45 45 44 D0 53 


S26C0 


08B8 


50 45 45 44 CB 31 30 30 


SBF84 


0SC0 


30 00 E7 08 32 00 91 3A 


S83C7 


0ac8 


92 33 3A B9 C9 31 36 33 


S2692 


06D0 


30 32 2C 30 3A 93 48 54 


f0C0A 


08D8 


41 42 2C 55 54 41 42 3A 


I947C 


08E0 


53 54 45 50 D0 30 00 28 


$FD52 


0SE8 


09 3C 00 53 54 45 50 D0 


$A188 


08F0 


53 54 45 50 C8 53 50 45 


$4C97 


08F8 


45 44 3A 50 4F 50 00 39 


SAllF 


0900 


35 CA DF 23 50 52 49 4E 


$2607 


0908 


54 CA 53 54 45 50 29 3A 


SBD2E 


0910 


58 43 4F 53 D0 28 OE 28 


$01FO 


0918 


53 54 45 50 29 CA 50 4F 


$6B0C 


0920 


50 29 CB 31 2E 37 33 00 


S094B 


0928 


55 09 46 00 59 53 49 4E 


5B02E 


0930 


D0 Df 28 53 54 45 50 29 


S2C32 


0938 


CA 50 4F 50 3A 93 CI 48 


$2266 


0940 


54 41 42 C8 32 CA 58 43 


$7A8F 


0948 


4F 53 2C 56 54 41 42 C9 


$97BA 


0950 


59 53 49 4E 00 30 09 50 


$34E7 


0958 


00 AD D4 23 59 53 49 4E 


$A6D7 


0960 


29 01 31 30 CD D4 28 58 


SI 302 


0968 


43 4F 53 29 Dl 31 30 C4 


S9C90 


0970 


B9 32 38 2C 52 4E 44 28 


$5730 


0978 


DB 28 31 29 CA 35 29 00 


$2FF0 


0980 


9E 09 5A 00 AD E2 28 47 


$6167 


0988 


: 45 54 29 CF 31 32 37 C4 


$77DF 


0990 


; BE 49 4f 60 55 54 24 3A 


$A4E1 


0998 


: 09 3A AB 33 30 00 A6 09 


$EEF5 


09A0 


: 64 00 AG 36 30 00 BD 09 ' 


S7844 


09A8 


: 6E 00 83 34 32 20 38 35 


S3C45 


09B0 


: 2C 31 32 37 2C 31 37 30 


SFF07 


09B8 

AF: 
SA1 


: 2C 32 31 33 00 00 00 00 

BFD9 

/E POLAR PRINTS 


$84EE 



Most 



Wamted 

List 

Need help 

backing-up a particularly 

stubborn program? 

Send us the name of the program and 
its iiianufaduier and we'll add it lo our 
Most Waiitotl List, fl (Column tupdated 
each issue) which helps to keep 
COMPUTIST readers informed of the 
programs for which softkeys are MOST 
needed Send your requests to 

coMPurrsT 

Wanted Ll.st 
PO Box 110846-K 
Tacoma, WA 98411 

if you know how to deprotect 

unlock, or tnodify 
any of the programs below, 
let us know. You'll be helping your lelbw 
COMPUTIST readers and earning 
MONEY at the 5a me time i^end the 
infurmijtioii to us in article form oei a 
DOS .1..1 diskette. 

A[i[ilt^ HiuiiiETiS Gnl]]li]ts Apptc CoiikpuLt:i 

Jaiic ArtftroDics 

Vlsibltnd Microlab 

Catat.vst Quark, tnc 

Gut^nbur^ Jr. it .Sr. Micromutiun LTD 

Krirne I'loller Pruiitsoji Cuip. 

Tlie Handlers Siltran Vat ley Systems 

The Appt**s Core: Parts 1-3 Ttic Prottssor 

Fun Bfinrti Ifnicorn 

Willy Bjle ... r>ma TieI: 

Craiuilaji Manor Sierra On-Line 

Snoggle BjiHtcrtiund 

ASM Musi; 

MyclieiS Tl Dutjimnfit 

Agent t.'.S.A. Schola'.tie 

Handicapping System Sports Judge 

Odin Odesta 

MalKl's Mansion Dfttainost 

Brain Bank The ObSBvalnrv 

(]^iTn^ilMl Oumi Pcrit^uuL 

Crjpt of Media Sir Tccti 

The Works First Star Software 

Cross Clues Science Research 

Peeping Tom Micruiub 

Jigsaw Miui<i>fuil 

Mincj- 2M9er It Microfun 

Create with Garfield DLM 

Print Master llnision World 

Bandits SiriuH StiiTwtirt: 

Operiitkui Frog St;tio!aslic Software 
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John Howard's softkey for. . . 



Yet Another F-15 
Strike Eagle 



MicroPfose 

12& Lake From Dr. 

Hunt Valley. MD 2}@31 

Requirements: 

A copy program that can select tracks 
A sector editor 

Larry JiiKonowicz did a good job of tracking 
down the protection on F-i5 Strike Eagle in 
COMPUTIST No, 24 page 19. Although my 
copy was different from his. I was able to 
deprotect it using the information from his 
anicie. 

Thc bytes to change on irty copy are. as 
follows: On tiack SIF sector SO, starting at byte 
$D4, the code I found was A9 60 SD flD 6A 
and the byte to change was byte $D5 from a 
$60 to $86. On track S21 sector $A. starting 
at byte $69, ihe code was A9 Cfi 8D 01 02 and 
the byte to change was byte $70, from a $C0 
to $DB. 

1) Format a new disk. 

2) Copy tracks $05 and $06 from a normal DOS 
disk. 

3) Copy tracks $00-$M and tracks $07-$22 
from (he original disk lo the normal DOS di.sk. 

4) Sector edit track SIF sector 500, byte $D4, 
from $6ft to $86, 

5) Sector edit track $21 secior$0A, byte $70. 
from $C0 to $DB. The copy is now 
COPYAahle. 



Sandy Eubanks ' softkey for. 



i 



Championship 
Lode Runner 



Requirements: 

Championship Lode Runner disk 
A blank disk 
A sector editor 

The ability to move memory pages to 7 on 
Reset {Modified F8 ROM or Senior PROM) 
Super lOB 1.5 
Hardcore COMPUTIST No. 22 



Championship Lode Runner continues the 
tradition of Its predecessor, only the game levels 
are much more difficult. An additional feature 
is the ability to save your game and continue 
it at a later time. This feature was .^iorely needed 
by the original release; 150 levels are too much 
for one sitting. The following softkey will give 
you that option. Read on. 

There have been two softkey s for Lode 
Runner published In COMPUTIST, Tom 
Phelps' (issue No. 22) is ihe one on which this 
softkey is baaed. Steve Marvin's softkey (issue 
No. 28) is for those without a way into the 
monitor. Being a novice to assembly language, 
I could not modify Mi . Marvin's code to work 
widi Championship Lode Runner. Having a 
Senior PROM, however, I could do enough 
disk snooping to use Mr. Phelps method with 
just a few modifications. Therefore, you should 
follow the softkey as listed in Mr. Phelps' 
article, substituting the step nunibens below tor 
its corresponding number in that article, 

4) Type in a BASIC program that will run our 
Championship Lode Runner main file. 

1« TEXT: HOME: PRINT 
CHR$(4)"BRUN CHAMP.LR.B" 

5) Insert a blank disk and format it. 
INIT CHAMP.LODERUNNER 

8) Type in the foUowijig hexdump which will 
move everything back into place and Stan our 
game. 



2900: 


AS 5F A9 9B A2 25 20 42 


I9A89 


2908: 


29 A0 2A A9 60 A2 35 20 


$FE2E 


2910. 


42 29 A9 40 85 t6 20 F2 


S90D6 


2918, 


F3 A0 40 A9 09 A2 06 20 


J5F90 


2920. 


42 29 A0 22 A9 02 A2 07 


JCe9F 


2928: 


20 42 29 A0 00 E9 00 n 


SB8CD 


2930: 


99 00 00 C8 D0 F7 m m 


S47D4 


2938: 


21 99 00 01 C8 m F7 4C 


S0EDA 


2940: 


00 60 84 01 85 03 A9 00 


SF0BD 


2948: 


S5 00 35 02 A0 00 Bl 00 


iDA89 


2950: 


91 02 CB D0 F9 E6 01 E6 


$7E71 


2958; 


03 CA M F0 60 


$B752 



9) Check your typing with CHLCKBLN and 
save (he listing to another DOS 1.3 disk (other , 
than CHAMP.LODERUNNER). 

BSAVE CHAMP.LR.MOVES 
,A$29fl«,L$5D 

13) When the title screen appears, press RESE 1" 
and then a "7" (if you're using Ihe Senior 
FROM) or a ":" (if you have the modified F8 
ROM) to niove $0-SFF to $2CK!)0-2SFF. 

14) While still in die monitor, compact the code. 

2Ae«<6«fle.94FFM 
5Fee<9Bee.BFFFM 



17) Install the move routines, finseit tlie disk 
on which you saved the hexdump). 

BLOAD CHAMP.LR.MOVES 

18) Insert the disk with die copied game boards 
and save the main file we just created. 

BSAVE CHAMP. LR.B,ASEFn,L$7S»3 

20) Back it up inimed lately with COPYA or 
some other fast copy program. 

Obviously, the main changes in the hexdump 
from Mr. Phelps' softkey lu-e to allow savmg 
of some additional memory areas. We also had 
to delete part of his routine that would have 
zeroed tliose areas we wanted to .save. The 
additional memory locations comaiued the 
sound routines present in the Championship 
version. 

Note that it's possible to put both the Lode 
Runner main file and the Championship Lode 
Runner main file on either game board disk. 
Both tiles search for the game boards on the 
same tracks, $03-0C. If you want to do thi.q, 
you will have to mark the VTOC as Mr, Phelps 
suggests. Additionally, you'll have change your 
hello program to allow BRUNning of either file. 
The advantage of using die Lode Runner file 
to play the Championship game hoai'ds is being 
able to practice difficult levels with the so-called 
"cheat" keys, Conversely, using the 
Championship file to play Lode Runner game 
boards allows you to save your game and 
continue it Later, 

In any case, it is now your option to do as 
you please... as it should have been all along. 
Enjoy! 



.% 



Robert Muir's xofikey for... 



Gato V1.3 



Spfanim Holobyte Inc. 

im® Wabwt. Siiite 325 

Boulder. CO SQMl 

Reqtiirements: 

128K Apple //e or //c (required by game) 

At least one drive _. 

COPYA « : 

A .sector editor , 

A blank disk 

Gato I ■ • 

Gato is a superb niuki-scrcened submarine 
simulation game. Since the softkey in 
COMPUTIST No. 23 did not work for my 
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version (1 .3) of Gaio, I sec oui to discover what 
it was about. J discovered that Gato was 
programnied in Pascal and that the only 
protection my copy had on it was to change the 
address header and address epilogue. On odd 
tracks the headers are D4 A A 96 instead of the 
nonnal D5 AA 96 (litere was no "nibble count" 
on my version). This can be circumvented 
easily by using the foUowing code to read 
address headers: 



Larry Rando's softkey for... 



B94F- 


BD 8C C0 


IDA ?C08C.>1 


B95Z- 


10 FB 


BPL $e94F 


B954- 


4A 


LSR 


B955- 


C9 6A 


CMP M6A 


B957- 


D0 EF 


BNE SB94B 



TTiis may look familiar because it is the same 
trick used to read the alternating address headers 
in Penguin Software releases. The bytes D4 and 
D5 will botli turn into the value 6A when shifted 
to the right, so they will both be considered the 
same byte when read. 

The altered address epilogues can be ignored 
by not checking for them. 

The following softkey will make a 
COPYAable copy of Gato, It can also be 
CATALOGed using the //e utilities disk and 
probably read using Pascal (I'm not sure 
because I'm not willing to spend what iitlie 
money I have on yet another language). 

1) Turn on your computer and boot DOS 3.3. 

2) Alter the Read Address Header routine. 

CALL -ISl 

B954:4A C9 6A D8 EF 



/, Damiano 



Bantmn Electronic Publishing 

666 Fifth Avenue 

New York. NY 1&W3 

Requirements: 

Fast disk copier 
A sector editor 

I, Damiano is an adventure based on a 
popular fantasy trilogy and is pan. of Bantam 
Electronic s "'Living Literature" series. The 
screen format has a different look opposed to 
the typical full screen graphics. Tlie hi-res 
pictures are on the upper iialf of the screen wddi 
text residing on the lower half of the screen. 
It includes some primitive animation. Overall 
it is a fun adventure gaine to play, especially 
if you are familar with the book in which the 
adventure is baaed. 

The Protection 

When I used a fast copier to copy the disk, 
1 only got one read error, on track $11. That 
told me that the disk was protected in some way. 
When I booted the disk the head did some kind 
of long movement and stayed on one track for 
a while. It was doing tlus because the nibble 
count went to Track ff 11 to check the disk. If 
it was a copy it would come back with a 



message saying "DISK READ ERROR". I 
proceded to search for the text DISK READ 
ERROR to see where it was on on the disk. I 
found the message on track 0, sector 0. I then 
set up a boot code trace to Ond out what catised 
the program to print this message; in other 
words there had to be some sort of nibble count 
routine that that checked 'frack %\ 1 for 
something and then returned tn display the 
me.sfiage "DISK READ ERROR," I found the 
nibble count on track 0, sector 0. The piotection 
code looks like this: 



0821 

0824 

0S26 

0827 

0829 

082C- JSR 

0B2F- INC 

0832- 

0835- 

0838- 

083A- 

083C- 

083F- 



JSR 
U)A 
ASL 
LOY 
J5R 



INC 
LDA 
CMP 
BNE 
JHP 
LOA 



S063F 

nm ■ 
am 

$0900 

$0A33 
S0AB1 
$0AG2 

$0A62 

nm 

S092C 
$09A7 
#140 



-Calls nibi]le count , 
-Normsi loader routine. 



■end of 
■Actual 



loader. 

nibble counter. 



The Procedure 

1) Use any fast disk copier and copy both sides. 
Ignore the read error on Track $1 1 {second side 
unprotected). 

2) Get out your sector editor and edit .side 1 , 
track H. sector 0. starting at byte $21 From 20 
3 F 08 to EA EA EA. This eliminates the JSR 
to the nibble count, 

3) Write it back out. 

That's it! _, 



3) Tell DOS to ignore the address epilogue, 
B98B:18 60 

4) RUN COPYA and copy Gato to a blank disk. 

5) Ruti your favorite sector editor and make the 
following sector edits: 

Track Sector Byte From To 



$0 
$0 



$F 



$Fe S38 JIB 
$80 S38 $18 



The first modifies the second stage boot to 
ignore address epilogues. The second modifies 
the final Pascal DOS to ignore address 
epilogues. 

6) Write the sectors back to the new copy. 

That will make a COPYAable version of 
GATO! 



i 



curs 



-- ■_- 3 I 

to b 

f '1 -3 Q i 



I iiiiiii iitiiiMiiiiiiimiii ^\l I |_ 

■ f halt", s t o o id o u 1 5 i d e , 
iriQ a stack of logs- My' master's 
f ^. h r o b b e d in his ha n d , a i<\ a r n i n --^ 
e careful- I sniffed, my nos.- '- 
c.5l th-sn the staff yet .just .j-. 



I TO HUT 
T hi e i II e 



c m .3 r. 1 n ' 
it like 



L-J e re .a c h e d t h e h u t , 
ii u r s i n 9 t. hi e w o o d . I 



:. Whv bother?- 



t |-i ^ hill s |-i o n e in 
1 ti a k e r ' s q 1 a z e . [•\ e 
I P e , .3 n id ti V t he t i rn e 

the man had stopped 

t h 111 u 9 h t 1 1 u a s 
t u m a n , t o c u r s e 



M 
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Charles Taylor's soflkey for... 



Wilderness 



Electric Transit 

50! Marin Street 

Suite 116 

Thousand Oaks. CA 91360 

Re(]uirements: 

Apple // 

Four blank disk sides 

Super JOB 

Copy [1 Plus 

WILDERNESS is a unique adventure 
simulation game, Imagine that you have just 
crashed your airplane somewhere in the high 
Sierras. You manage lo escape from die wreck 
with a few survival items, including a 
topographical map, a compass, tent, some tools, 
and some tbod. You so! a ranger station on your 
map, but your crash-site could be anywhere, 
and the map covers hundreds of squaie iniles, 
la order to survive, you will have to battle the 
elements, deal with the various wildlife, such 
as bears, snakes, cougars, and insects, and ford 
numerous streams and lakes. In addition you 
must eat, sleep, camp, avoid injury, exhaustion, 
overheating and exposure. This is just one of 
the scenarios availuble to vou if vou play 
WILDERNESS. 

The game uses a three-dimensional graphics 
generating system, a series of accurate models 
of weather patterns, and a 300 word vocabulary 
with which to negotiate the adventure. 
WILDERNESS is accurate down to the most 
mundane details, such as hanging your food 
from a branch at night so the bears don't get 
it, correcting youi- compass readings for the 
difference between true north and magnetic 
north, and putting your fire out before breaking 
camp. 

While the game is sopiusticalcd, the copy 
protection is not, consisting of four protected 
tracks (0-3). Any bit copier can deal with this 
program, but the fame and fortune of being a 
COMPUTIST contributor beckons, so here 
goes. 

Since we will replace their DOS with DO.S 
from the 3.3 system master, we only have to 
deal with one protected track (3). Track diree 
has [he address epilogue changed from DE AA 
to AA DE, Once track three is convened we 
And tliai there is a normal catalog listing of diree 
short files on track 3, mcluding a boot program 



called BOOT and a special DOS image called 
SMALLDOS. The normally formatted tracks 
4-22 run under ,SMALL DOS. 

The game consists of two sides, the 
JOURNEY side and the SIERRA NEVADA 
side. Separately available is a third side, called 
die GLOBAL EXPLORER. This disk gives you 
five more countries in which to adventure. The 
JOURNEY di.sk is unprotected, and die 
SIERRA NEVADA and GLOBAL 
EXPLORER sides use identical protection 
schemes. 

Step By Step 

1) Boot your DOS 3.3 system master disk. 

2) Type IN IT BOOT and init two blank disks 
(one if you don't have GLOBAL EXPLORER.) 
Uhel these disks SIERRA NEVADA and 
GLOBAL EXPLORER. 

3) Using Super JOB (the Controller Writer 
helps) copy track $3 of both the GLOBAL 
EXPLORER and SIERRA NEVADA sides to 
dieir respective INITtcd disks, changing die 
address epilogue from DE AA to AA DE. 

4) Again, using Super lOB, copy tracks S4 
through $22 from the SIERRA NEVADA and 
GLOBAL EXPLORER to the INITtcd disks. 
Use the default (normal) marker settings this 
time. The Controller below will perform both 
Steps 3 and 4 in one run for you, 

5) Use COPYA to copy the JOURNEY side to 
ihe back side of each of your new copies. (The 
GLOBAL EXPLORER and SIERRA 
NEVADA sides are independent of each other, 
hut bodi use die JOURNEY side. 

6) On my copy of GLOBAL EXPLORBR, I 
got an error on sector SF of track $0F. I used 
the sector editor of COPY 11+ patched to 
custom DOS, ignored data checksums and data 
epilogues to read the protected sector, then 
wrote it back to my copy. If you are not copying 
GLOBAL EXPLORER at this time, you may 
find it easier to use die sector editor from COPY 
11+ for tracks $4-$22. 

7) Take a hike I (with your newly softkeyed 
WILDERNESS of course). 



controller 



= 15:LS=15:CD = 
: GOSUB 170 



1000 REM WfLDERNESS 

1010TK = 3;LT=4:ST 
= 1 ; POKE 776 ,( 

1020TUTK : GOSUB -190 

1025 GOSUB 610 ; I F LT = 4 TIH GOSUB 230 
:LT=35 : GOTO 1025 



WR:FAST 



;TH-4 



1030TK=T1 : GOSUB 499 : GOSUB 610 : IF PEEK (TRK 

) = LT THEN 1050 
1040TK = PEEK (TRK) :ST = PEEK (SCT) :GOTO102B 
1050 HOME : PRIMT "COPYDONE" : END 
5000 DATA 170 .222 ,222 ,170 



controUer checksums 

1000 - S35GB 1030 - $E182 

1010 - SF843 1040 - J5B61 

1020 - $0BAB 1050 - ?0C5D 

1025 - S5506 5000 - JDZCl 



John Howard's soffkey far.. 



Golfs Best 



One Step Sojhvare 

Requirements: 

A program that will read non-standard sectors 
and write them back in a nomiai format (Super 
lOB, Copy II Plus, CIA). 

Golf's Best is a very good golfmg simulator 
that will let you see the direction your bail is 
going before you hit it. The overall tee-to-pin 
graphics display is not as good as some golfing 
simulators but the approach and screen displays 
are excellent. The only thing that I would like 
to see in di is simulation is for the players to have 
honors on tee-off. The game keeps the same tec- 
off order from start to finish. 

The Protection 

Tiacks $00- $02 and even numbered tracks 
$04-$22 are normally formatted and can be 
easily copied with the Copy II Plus manual 
sector copy function. Odd tracks 503-S21 have 
altered address headers, trailers, and 
checksums. By disabling the address header and 
the checksum using the CIA you can copy all 
the non-standard sectors to a normal disk. This 
copy boots and works fine as is. 

s 



feature \fe-cher\ n [ME^v«re, fr, MF, 
fr. Lfactura act of making, fr. factus, 
pp. of facere to make— more at DO] 1: 
the structure form, or appearance csp, 
of a person 2: a software bug mentioned 
in its docujiiematiou 
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hardware project... 



K^yeatiyiQ _yv S^witckabie 



f 



by Wes Felty 



Requirements: 

Linen ha need Apple ^/e 

//e enhancement kit 

Access to another computer 

EPROM programmer that can handle 27128's 

One 2764 and two 27128 EPROMs 

(additional supplies listed at end of aniclc) 

Note: Tlie procedure described in ihix article 
requires modificatiim ofwur computer, which 
may void its warrant}'- COMPUTIST will not 
be held reiipottsible for any damnges incur re.d 
white following this procedure. Observe the 
usual precmuions when working with electronic 
.equipment. 



Why create a Dual System? 

The folks al Apple Corp. are claiming that 
more and more software is going to be written 
for the Apple //c and enlianced //e computers 
only . Considering the advantages of the faster 
65C02 chip, its additional machine language 
instiuctions, Kome improvements in the monitor 
ROM chips, and the mouse test character set, 
it is quite likely that many new programs will 
be developed that have to run on the enhanced 
computers. But if you get your present //e 
etihanced, it will scramble some of your old 
software and not run some ot it at all. If you 
are just starting out and buying all new 
software, then you may not need a dual sysleiii. 
But if you have old software like PPS, 
ApplcWritcr. ASCII Express Pro (DOS 
version), etc.. then you need a dual .system to 
be able to run the old unenhanecd software and 
the new enhanced software 

Pl'SiULH and PFS: WRITE progratns 
released before November, 1985 are severe 
victims of the scrambling that the //c and 
enhanced /It Apple computers do to some older 
software. All of their command prompt lines, 
field category prompts, and underlined or 
boldfaced text are replaced with mouse text 
icons. Apple Writer //e's DOS 3.3 version has 
its data line partially scrambled. The DOS 3.3 
version of Sensible Speller also has its command 



lities scrambled. In faei, any program that uses 
invetse characters anywhere in upper and lower 
case may fall victim to this scrambling. If the 
program has a solid, non-blinking or a custom 
cursor, it probably will get all of its inverse 
upper case characters converted to Mouse Text 
icons. By the way, I have patches available for 
fixing AppleWriter, PFS: FILE, and 
PFS: WRITE to run on enhanced //cs, 

Some other programs will not run properly 
on the etihaneed //e due to monitor ROM 
problems. My version of ASCII Express Pro 
will boot up, but then later lock up after making 
contact, usually long distance, but before 1 have 
done any communicating, (United Software will 
give free updates to some users depending on 
the senal number of ttieir disk). My Ultja ROM 
board with GPLE built into it just freaks out. 
These problems of hardware and software 
incompatibility are usually due to the 
progranraiers having usee! "unofficial'" jumps 
into monitor routines. The unsupported jumps 
show up in most non-trivial programs and in 
many cases were needed to get around slow 
operation or bugs in the original //e ROMs. But 
you don't have to buy new versions of hardware 
and software to use with the enhanced lie. lust 
create a switch able enhanced/unenhanced /7c 
and be able to use all of your old and the newly 
developed hardware and software. 

.Some programs will not boot up at all on the 
//cs or enhanced //es due to die programmer's 
"protection" to keep their programs from 
running on "clones." Tills "protection" on 
programs like the "Disk Scanner" are the 
height of ridiculousness since they worked by 
detecting a bug that was known to be in the 
Apple's 6502 CPU that Apple had never 
bothered to fix but that some of the clones had. 
These old programs will have to be patched to 
nm on any enhanced lie since my switchable 
system doesn't do yuy thing to the new 65C02 
that replaces the 6502 CPU chip. 

How to tell if your Apple //e is Enhanced 

It is quite simple to tell an enhanced He from 
an unenhanced one. First of all, it probably says 
"Enhanced" right above the green power-on 
light. Also, an enhanced //e says "Apple //e" 
when cold booted and an unenhanced one says 
"Apple J[". With an enhanced //e, you can 
enter non-DOS commands like "cat! -151" in 
lower ease without generating a "SYNTAX 



ERROR". And finally, from the monitor 
prompt ("*"), entering "!" puts you into the 
mmi-asserabler with its "!" prompt. 

How the Enhanced /Unenhanced 
Switching .system works 

The main thing that makes the switching 
system relatively simple is the fact that the 
Apple //e uses chips that are completely 
compatible with 2764 EPROMs for the monitor 
ROMs and a 2732 EPROM for the Video 
ROM. Therefore the "official" Apple chips can 
be directly replaced with F.PROMs with no 
changes needed to the computer's circuit board. 
Therefore, the "official" chips cm be replaced 
back into the computer easily at any time. 

The other main fact that simplifies 
constructing a duul system is tlie fact that a 
27128 EPROM can act just like two 2764 
ROMs rolled into one chip and a 2764 EPROM 
can act like two 2732s in one chip. A hardware 
switch can connect a select pin on the EPROM 
to either +5 Volts to activate one bank or to 
ground potential to select the other bank. The 
65CW2 chip can't be bank switched, but then 
it doesn't need to be since a 65C82 can be used 
in any of the Apple // line of computers. 

When an Apple lie is made enhanced, four 
of its chips are replaced; the 6502 CPU, the 
Video ROM, and die CD and EF monitor 
ROMs. The switchable system has both the old 
code for the unenhanecd computer and new 
code for the enhanced computer burned into 
double sized memory chips replacing the Video 
ROM and the two monitor chips. The monitor 
chips have the same pinout arrangement as the 
original Apple chips, so they are directly 
replaceable. 

With the Video ROM a 2K pin chip has to 
replace a 24 pin chip, so a more complex 
adapter socket is required. Wires run from the 
diree new chips to a switch mounted on the back 
of the computer to switch between 
enhanced/unenhanced. When the switch is in 
the enhanced position, the computer looks 
internally like a normal enhanced Apple lie. 
When the switch is in the unenhanced position, 
the computer looks exactly like an unenhanced 
//e except for having a 65C02 chip in place of 
the 6502 CPU. The I.D. bytes and everything 
else that distinguishes each system is fully intact 
for both switch settings. 
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C^nkanced/ Unenkanced l/e 



If your only prohlein with the enhanced Ih- 
comes from the mouse text characters 
scrambling tipper case inverse letters as in the 
PFS software, then you can greatly simplify the 
modifications given below by just following the 
procedure Si for the Video ROM. If you did just 
that part and then later found the need for the 
full conversion, it would not be any harder lo 
finish the job with the two monitor ROMs at 
u lalter titne. 

What Has to Be Done 

To create a dual enhanced/ uncnhanced system, 
you need to 

t) Capture the code from the old CD, EF, and 
Video ROMs (before you have the computer 
enhanced!) 

2) Capture tlie code from the new CD, EF. and 
Video ROMs 

3) Burn the two sets of code into the double 
capacity ROMs 

4) Constnict adapter sockets for bank switching 
the two monitor ROMs 

5) Construct an adaptei socket for the Video 
ROM to; 

a) Bank switch between enhanced and 
uncnhanced 
h) Connect a 28 pin chip into a 24 pin socket 

6) Replace the 6502 CPU chip with a 65C02 
chip 

7) Connect the adapter sockets to the switch 

8) Replace the original chips with the dual chip.s 

9) Te.it the new chips 

Each of the alxjve processes will be explainetl 
in detail below. 

Capturing the ROlVb' Code 

There arc at least three ways to capture the 
code from the unenhanced and enhanced 
monitor ROMs. The code from the EF ROM 
can be just moved down in memory witii the 
monitor move operation: 

10e»<E»»8.FFFFM 

and BSAVFd from there. Unfortunately tlie CD 
ROM Yi closely tied with the 1/0 area. 
Depending on the .settings of some soft 
switches, it may be visible or invisible when 
you fry to read the JCxxx area. Also, some soft 



switches go crazy if you try the monitor move 
operation on the ROM and accidentally trip 
tliem . 

Another way to capture the codes is to use 
Don I .ancaster'R '"Snatchmon" nnitines. These 
routines take care of the soft switches and 
everything and essentialiy download the code 
into RAM memory . Copies of these programs 
have been published in the November, 1985 
issue of Modern Electronics, an issue of 
Computer Shopper, and in the Synergetics (Don 
Lancaster's company, address below) Absolute 
RESET mod package (SI*). 50). If yon called 
tlie Synergetics helpline at (602) 428^073. Don 
Lancaster would probably mail you a free copy, 
but 1 highly suggest that you buy from him his 
Absolute RESET package. It is way 
underpriced at SI 9,50 for the value given. It 
is full of valuable information on EPROMs, it 
tells you how to build personality modules to 
let a 2732 EPROM burner program 2764s and 
27128s, it gives you the Snalehmon programs, 
and it tells you how to make a small change to 
the monitor ROM to give you a way to RESET 
out of ANY program. 

Wliile this second uiettod will allow you to 
capture the monitor ROM's code, there isn't 
any way to recover tlie code stoied in the Video 
ROM from the computer that it is running on. 
The only way to recover this code, and 
therefore the best way to recover the code from 
all thre-e chips, is to use an EPROM burner that 
can download code from a chip. Using another 
computer (you can't use your computer when 
you remove the ROMs!), dowriload the code 
from die Video ROM, the CD ROM, and the 
EF ROM and save it to disk. Include in the disk 
file name something to tell you if these codes 
were enhanced or uncnhanced. You will lind 
thftse chips well marked in the two rows of chips 
elo,sest to the keyboard. 

If your //e is already enhanced (your Video 
ROM will be pan number 342 8205. m\ 
342-0133), then you wdl have to find someone 
else with an unenlianced //e to copy the code 
for die three chips from. Unfortunately, .Apple 
dealers won't let you keep your old chips when 
they enhance the computer. If your computer 
is not yet enhanced, then be sure to copy die 
unenhanced chips' code before having it 
enhanced. Getting it officially enhanced is tlie 
easiest, though most wastcfiil, way to get access 
to the enlianced chips AND the 65C02 CPU 



chip that you will need. Probably the most ideal 
siniaiion would be for a person with an 
enhanced //e and one with an unenhanced //c 
working together to hoih help each other in this 
project , 

Using whatever method works best for you, 
capture the code from the three chips for both 
the enhanced and unenhanced computers. Bum 
both the enhanced and the unenhanced code intti 
a 2764 EPROM for the Video ROM and into 
27128s (2728s) for the two monitor ROMs. Be 
sure to use the same order in all three EPROM s, 
for example enhanced in the low end and 
unenhanced in the high end. Therefore, if your 
EPROM burner expects code to start at % 1000, 
then: 

BLOAD VIDEO.ENHANCED, A$lMe 
BLOAD VIDEO. UNENHA,NCED, ASZeUB 

and for the monitor ROMs: 

BLOAD CD.ENHANCED, A$ieefl 
BLOAD CD. UNENHANCED, A$3»8e 

Do the same for the EF code. 

If you are starting with an unenhanced //e, 
and have managed lo gel the enhanced ROMs 
from other than an "official" enhancement, 
then you will need to find a 65C02 to replace 
the 6502 CPU in your computer. I doubt thai 
you will be able lo get one from your '"official" 
Apple dealer any more than he will let you keep 
your chips or tell you in advance about the 
so it ware thai won't work properly on your //e 
after you get ii enhanced. 

Tlie only source that 1 have found for the 
6.SCR2 is The Western Design Center, fnc. 
(address below) for about S9. 15. They use part 
number W65C02P-2 and will ship C.O.D. 

Constructing the Adapter Sockets 

The three special adapter .sockets are each 
constructed by mounting one lt>w profile socket 
on top of another with the modifications being 
done between the two sockets. This adds to the 
strength of the arrangement, prevents damage 
that can be caused by soldering directly onto 
the EPROM, and allows the EPROM to be 
easily removed from Ihe adapter Socket for any 
later re prog ramming. 

Betoie we start constructing the adapter 
sockets, let's be sure we know how to locate 
the correct pins. Looking at a chip or socket, 
you should find one end marked with a small 
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hair circle, a dot, a beveled edge, or a number 
"1". (See Figure 1). If you hold ihe diip or 
socket right side up widi the marked end toward 
you, Lhen the pin tJOiiest lo you on llie righl aide 
is pin number one. Pin number two is the next 
farther pin away on (he righl side. This 
continues up to pin 12 or pin 14 for 24 and 28 
pin chips respectively. 

Then the numbers continue from die pin 
straight across from the lust one continuing to 
increa.se coming toward you uniil the highest 
number pin is at the front left side of Ihe ehip. 
Be sure to check the numbering with the chip 
or socket RIGHT SIDE UP, 

Now let's see how the chips are bank 
switched. Some of the pins of the 2764 and 
27128 EPROMs are hank select pins (address 
lines). For our purposes this is pin 2 on the 2764 
EPROM (Video ROM replacement) and pin 26 
on a 27128 EPROM [moniior ROM 
replacements). If the select pin i,"; brought to +5 
VolLs, it selects one baidt and if it is brought 
to ground potential , it selects the other bank. 
The + 5 Volts potential comes from pin 28 and 
the ground potential comes from pin 14 for the 
28 pin chips. These are pins 24 and 12 
respectively ir the 24 pin chips. To set up a 
hardware bank switcher, we need to disconnect 
the select pin from contact with the mother 
bciard and connect it through a EKiuble Throw 
switch to connect it to either the + 5 Volts pin 
or the ground pin of the chip (see Figures 2 & 
3), We will di.sconnect the select pin by 
removing the select pin on the btittorn socket 
SO that it doesn't enter the mother hoard socket 
when we plug the udapler socket into die mother 
board. 

Coastrut:iiag the Video ROM 
Socket Adapter 

The Video ROM chip adapter takes more 
than is shown in Figure 3 because of the 
problem of plugging a 28 pin chip into a 24 pin 
socket. Fortunately, die four pins that stick out 
over the end of the 24 pin mother board socket 
(1, 2, 27 and 28) are easy to deal with. Pin 1 
(VVP line) and pin 27 (PGM line) need to be 
at +5 Volts for the chip to be read. Pin 28 is 
supposed to be plugged into the socket's -!-5 
Volt outlet, but that is pin 24 on the 24 pin 
socket. The chip's pin 26 wiiich is not connected 
inlernaUy is the one that plugs into the mother 
board's pin 24, +5 Volt supply. Therefore, if 

Figure 1 
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we ,solder a wire connecting pins 26. 27, 28, 
and 1 together, the Video EPROM is all set up 
for a reacl action, which is what we need. And 
pin 2, the select pin, would have had to be 
removed from the lower socket anyway and 
soldered lo the center position of the double 
throw switch. Therefore, the 28 pin chip in the 
24 pin .socket comes out being to our advantage. 
See Figure 4 for the complete Video ROM 
wiring diagrajii. 

To acmally construct the Video ROM adapter 
socket. Start with three pieces of hookup wire 
about 14 inches long each, a 28 pin socket and 
a 24 pin socket. Strip enougli insulation off of 
one end of one piece of wire to connect pins 
1, 28. 27. and 26, Strip just enough insulation 
from the ends of each wire to solder to the 
socket pins or the switch. Tin both ends of each 
wire. Solder the wires a.s close to the sockets 
as you can being careful that tlie wire doesn't 
touch the adjacent pin (except for 26, 27, and 
28), For tlie present, just solder them enough 
to get to stick to tlie surface of the pins. Be 
carefijl to not apply too much heat yet. Some 
sockets will melt with too much heat and the 
pins will pull out. Once the wires ane "tacked" 
onto the pins as in Figure 4, install the 24 pin 
socket onto die bottom of tlie 28 pin socket so 
that the pins away from the pin 1 end line up. 
The lines on Figure 4 from the 28 pin socket 
to the 24 pin socket arc not representing wires, 
but Just the pins of the top socket inserted into 
die lower socket. In other words, pin 3 of the 
28 pin socket goes into hole 1 of the 24 pin 
socket, pin 14 of the 28 pin socket goes into 
hole 12 of the 24 pin socket, etc. 

Being careful to not bend the pins on the 
lower socket, work die pins of die 28 pin socket 
as deep as you can into die 24 pin one. An 
alligator clip on each end helps to hold the 
sockets together while doing this. When you 
have the two sockets as close together as you 
can get them, (they will be held apart by the 
soldered wires), then gently squeeze one end 
of the socket adapter with a pair of pliers and 
heat the soldei connection on diat end of die 
adapter to permanently solder the wire to die 
pin. 

Heating it well at this time allows the lower 
socket to push the solder connection firmly up 
against the top socket and may even melt the 
iwo sockets together. Repeal at the other end. 
Connect the other end of the wire from pin 2 
lo the center jx^st of a DPDT switch and the 
other two wires to the outside pasts of die same 
switch. That completes the constniction of the 
Video ROM adapter. 

Constrticting the Monitor ROM 
Adapters 

These two socket adapters are made from 
ne.sting four 28 pin sockets together into two 
sets of sockets soniewlmt similar lo die Video 
ROM adapter. Pick two sockets. Solder a 5 inch 
piece of wire from pin 26 of one of Ihe sockets 
to pin 26 of the other one. Then solder an 1 1 
inch piece of wire from this jumper wire to die 
center post on the other (imused) half of the 
DPDT switch. Next solder wires on pins 14 and 
28 on either one of the two sockets. The other 
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socket will just have the one wire connected to 
it. Plug each of these two modified sockets into 
another 28 pin socket. 

The lines on Figure 4 from the 28 pin socket 
to the 24 pin socket are not representing wires, 
but just the pins of the top socket inserted into 
the lower socket. On both sockets, heat the 
solder connections while squee/Jng the sockets 
together like with the Video ROM, Connect the 
other two wires to the DPDT switch being 
careful to put the wires in the same order as 
you did for the Video ROM socket. In other 
words, be sure that the end of the switch that 
has the pin 14 Video ROM wire also has the 
pin 14 monitor ROM wire connected to it. 

With a pair of needle nose pliers, carefully 
pull out or break off pin 26 of each of the 
monitor ROM's lower sockets. And finally, put 
some little blobs of Epoxy Putty on the pieces 
of wire to bond the wires to the sides of the 
adapter sockets for strain relief. Also put some 
Epoxy Putty on the sides of the adapters to bond 
the two layers of sockets together. Epoxy Piitty 
can be found in most auto and hardware stores. 
It con.sists of a toot long strip of a blue and a 
yellow malerial. You tear off a couple of inches 
of both colors and knead the two layers 
togedier. When it is uniformly green, it is ready 
to use as a sticky, thick, putty like material. If 
you keep your fingers wet while handling the 
material, then it doesn't stick to them as much. 

If you have some very long cards in slots six 
or seven, then these double socket adapters may 
be too high for the cards to fit above them. Just 
try tt) use only the lop socket soldering as close 
to the socket's body as possible. While doing 
the soldering, you waul to loosely fit another 
socket on the bottom of the pin.s to hold the top 
pins in place since the heal from die soldering 
may temporarily loosen the top socket's pins. 

Do NOT try to take a short cut and connect 
all three EPROMS together using one switch. 
It seems like it should work, but it can blow 
youi motile r hoaid. A $3 DPDT switch is much 
cheaper than a S150 modier board. 

Installation of the Dual Chips 

Be sure to have the power turned off during 
ail chip replacements! First, install the Video 
ROM EPROM in the fir.st tjonstructcd solo 
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sotkct. Be sure that the number one marked end 
of the chip (s on the same ettc! as the number 
one marked end of the socket. Replace the 
mother board's Video ROM (position F-4 on 
the mother board) with the EPROM. Be sure 
that the EPROM 's maiked end is toward ttie 
kcybcard. Be careful tu not bend under any of 
the adapter socket's pins while installing thetn. 
install the CD and Kh tPROMs in ihc two 
sockets that are connected together. It doesn't 
matter which one goes in which socket yet. Be 
sure that they are both positioned with the 
number one marked end of the chips in the 
number one marked end of the sockets. Remove 
the CD ROM (position D-8) and die EF ROM 
(position D-lfl) from the mother hoard and 
replace them with the respective EPROMs. Be 
sure that the marked ends of the EPROMs are 
toward the keyboard. If your Apple //e was 
unenhanced, then replace the 6502 CPU 
(positioti B-4) with a 65C02. That's it! Now for 
testing. 

Testing the Dual System 

The first test is a quick one. Open the disk 
drive door and turn on the computer. Be ready 
to turn it off immediately if it doesn 't beep and 
start the disk drive. If there is any problem then 
check that you didn't bend any pin.s while 
installing the three adapters or CPU chip. 
Notice rather the screen displays "Apple ][" 
for the unenhanced switch setting or ' 'Apple 
y/e" for the enhanced setting. Flip the switch 
and press Ctrl -Open Apple Reset and you 
should get the otlier message. Now use die budt 
in Diagnostic routine. Press Control-Closed- 
Apple-Reset, For the unenhanced .setting, the 
screen should clear and occasionally turn 
inverse. It should finish with the message 
"KERNAL OK". The enhanced self test fills 
the screen with small squares which 
occasionally fluner and finally, after a long 
wait, the message "System OK" is displayed. 
Self test both switch settings. Then try booting 
a non-important disk in e^ch setting with a cold 
boot, Also bo ot ad isk with "PR/J6" and from 
the monitor 6 IRPI in both .settings. You may 
flip the switch while the computer is on but if 
,a program ij; running, you will find that some 

Figure 3 










Figure 4 










^ 


1 




S 1 


„ r 


r 




r 








c 


f 


(4- Hf. 
so 

^ 

1^ 3 


•6 — ■ — ■ 




•*- 


y 


t 


o 
•a 


rn 


I 




•o 






i— 


















programs, like PFS and Apple Writer, are not 
hurt by the flip, but many programs will be 
clobherexl. PFS and AppleWriter use their own 
internal routines instead of the monitor ROM's, 
but many programs use the monitor ROM's 
input routines and those are different in the two 
types of ROMs, so the Apple gets lost. You 
often have to cold boot after flipping the switch. 

Finally, let's make sure that the enhanced 
Video ROM is on at the same time as the 
enhanced monitor ROMs. Flip the switch into 
the enhanced position (Apple //e), cold boot die 
computer, and turn on the alternate character 
set by typing 

PR#3 

PRINT CHR$(27) 

UVVERSE 

You may also wish to type 

PRINT CHR$(17) 

to return to 40 columns with the alternate 
character set still active. Type some upper ease 
and lower case characters. The lower case 
characters should show up in inverse and the 
upper case characters should come out a.s mouse 
text icons. Enter "FG" together for the running 
man. Flipping the switch hack and fodh should 
aitertsaie between mouse Lext and inverse text 
for the upper case characters. But after flipping 
die switch a couple of times, you may lind that 
h "flakes out" and needs to be cold booted 
again. If your computer boots up with "'Apple 
//e" and doesn't give icons with the "PR#3" 
sequence above, then you need to switch the 
pin 14 and pin 28 wire.s on one pole (side) of 
die DPDT switch. Then run dirough all of ihe 
tests again. 

[f you have a copy of AppleWriter, or a pre- 
Novcmbcr, 19S5 copy of PFS;FILE or 
PFS.WRITE, then switch into enhanced and 
boot any of them up. After noting Ihe 
"garbage", flip the switch and note the return 
loenglish. Wilh PFS:FILE flip the switch back 
and forth when in the selection menu. This is 
really impressive if your field prompts are in 
all upper ease letters. 



I suggest mounting the switch in one of the 
holes on the back of the computer, preferably 
on the right side so that you won't accidentally 
hit it when turning the power on/off. 

Materials Needed: 

• EPROM Programmer (burner) capable of 
handling up to a 27128 chip and capable of 
downloading code from a chip 

• Access to a second computer to use HPROM 
burner in 

• The code from an unenhanced Apple //e's 
Video ROM, CD ROM. and RF ROM 

• The code from an etihanced Apple //e's 
Video ROM, CD ROM, and EF ROM 

• One 2764 EPROM 

• Two 27128 (2728) EPROMs 

• One 55C02 Microprocessor 

• One low profile 24 pin socket 

• Five low profile 28 pin sockets 

• One DPDT switch (or two SPDTs) 

• About I wo yards of hookup wire 

• Some Epoxy Putty (for .strain relief) 

Synergetics 

746 First St. P.O. Box 809 

Thatcher, Arizona 85.^52 

(602) 428-4073 

The Western Design Center, Inc. 

2)66 Hast Brown Road 

Mesa, Arizona 85283 

(602) 962-4545 

TELEX 6835057 

Wes feUy 

2628 133rd Place S.E. 

Bothcll, Washington 9^012 

(206) 337-3720 

This whole procedure is very complex, but 
dien it is a pretty sophisticated change being 
made to the computer. If you don't feel like 
tackling the whole construction process, then 
you may wish to contact the author about the 
availability of pre -constructed setups. 
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softkey for... 



Cyclod 



By Felix LeChat 



Sirius Sojhvare 
{retired) 
Rc([U ire n« cuts: 

Two blank disfes 

A set lor editor 

Any bit copy program 

Cyclod is another game from Sirius who, as 
we all know, love(dl to protect their products. 
Cyclod is not the greatest game around because 
it does gel repetitious, but craking it is tlie most 
challenging part. Even the most up-to-date bit 
copiers can 'I seem to eopy Cyclod and tliere's 
enough di.sk access to keep NMI users away . 
However, after .lome delicate snooping and 
examination, it can be saved as an ordinary 
binary file. 

You won't need any special little tools to 
crack Cyclod, except for a nibble copier. This 
procedure is faiily long and involved because 
of the level of protection. I split the sottkcy into 
two parts: getting Cyclod 'iato memory and 
saving Cyclod. 

The Protection 

Sirius protected every track except tor tracij 
0. It uses 4 + 4 encoding, checksmns of both die 
hoot program and the main program, and resets 
die page 3 vectors. To start off I bit copied what 
I could onto another disk, that is, just track 0. 
After boot code tracing I was able to capture 
the boot program and defeat the checksunn 
routines. This code lies in the text page btit 
modifying track 0, sector <to move ii 
elsewhere) allowed me to exuinine this code. 
This boot program simply loads data and the 
program and JuMPs to the start of Cyclod at 
SBEA6. When Cyclod is played. It constantly 
JSRs to $400 to read in data foi every level. 
All I did was load in all the data and the game 
and stopped the execution. After booting up a 
.slave disk I was able to save the game from a 
normal DOS 3.3 disk. Now the difllcull part 
was to make the program lit in memory and JW 
coirectly . 



Much of the data loaded in at every level was 
tlie same. To conserve space I crunched the 
program and got rid of similar data. Then I 
wrote a short piogiam to uncrunch Cyclod and 
.simulate die boot program to "load in" data. 
After testing I also had to make a few patches 
to the main program to defeat checksum 
routines, 

0) First pre-read these instructions and write- 
proieci Cyciod if h isn't already. 

Part I: Getting Cytitid 

1) Initialize your two disk.s. You may use a fast 
DOS if you wish. Call one of them Disk I and 
the Other Disk 11. Delete the HELLO program 
on Disk U. 

2) Bit copy only track of Cyclod onto Disk I. 

3) Make the following sector modifications to 
track sector of Disk I, 

Warning! Be very careful. Track & is very 
weir J. After making the patchex, you must write 
the sector ai leant three times to assure proper 
writing. Theft reitd the sector at least twice and 



make sure the patches are still there. If you write 
it only once, chances we the patch won 't work. 



1st byte 


change hm 


to 


I6D 


IF 04 


B3 08 


$B3 


zeros 


A0 00 A9 10 
99 AB 07 C3 
18 69 10 C0 
08 D0 F5 A9 
AS 8D 4D 04 
A9 00 4C E8 


m 


zeros 


8D 4E 04 99 
AB 07 4C IF 
04 



4) Boot Disk 1. After you see the hi-res page 
flicker, remove Disk I and insert your original 
Cyclod disk. When you hear several bleeps and 
die disk leboots, immediately take out the 
Cyclod disk and insert Disk 11. Don't worry, 
this process will not harm your original disk. 



:::;i.i.r':.i.ui::::i 

PRESENTS 



otBOfflflW M M mmm m 
mmm. 1 mmm mmimm. 






fmrnm. 



nuMcci mmm 



I.. I I 'ii.' 1 ' •!•• '. II" "im "ill" 'iiii 'i 

CPRESS SPACE TO PLnV> 
CO COPVRIGHT 1381, SXRXUS SOPTURRE 



m 
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5) Go into the monitor and make the following 
memory moves. 

CALL -ISl 

108e<3flB«.?t»58M 

uee<4»e0,4«SBM 

118»<5B»».5B5eM 
l2m<6<im.6</l5,fiM 

128»<7(»t)B.7B5«M 

i3ee<8i)eo.805flM 

6) Save this data (ihis is a shortened form of 
the data loaded in at every level). 

BSAVE CYCLOD.DATA,A$ie9e,L$351 

7) In.sen the Cyclnd disk, [n the monitor you'll 
get ready to boot trute Cyclud. The tirst 
instruction disconnects DOS, the second clears 
memoiy, and the third copies tlie boot ROM 
to RAM. 

s(i«:e0 N mi<iim.9iimM 

66ee<C6«B.CfiFFM 

66FSM 

6600G 

8) Make the following memory patches to bootl 
and execute it. 

82F:14 N 8S9:18 N 86Di69 FF 
30e:A2 68 86 2B 4C 01 68 
3»flG 

9) When you see the hi-res screen type the 
following (you'll be typing blind to start with) 
to modify Cyciod's boot program. Then execute 
it, 

C«51 
C»54 

144D:A<> m 
146C:A9 69 
I47A:A9 FF 
172C:69 FF 
3ee:A2 68 4C IF 84 



innnrrfm 



m.mi\. 



4e«<148e.l7FFM 

imc 

10) Cyciod should now start loading. When it 
is done, the comptitei will probably hang. Press 
Reset to get into the monitor and make the 
following memoiy move. 

239e<94e9.AE8eM 

11) Insert Disk II and reboot. 

60S 

Now you have the bulk ofCyelod in memory. 
Pan II will create a program to properly execute 
Cydod and save everything in one file. It will 
continue where you left off so don't change 
aiiytliiiig! 

Part 11: Saving Cytlod 

1) Enter the following hexdump. Check it 
against the Listing that follows. 

988:28 58 FC Afl 48 A2 68 A9 
988:18 2«21 89 A8 23 A2 94 
9ie:A9 IB 28 21 99 2C 58 C9 
918:2C 57 CM 2C 54 C9 4C A6 
92er8E 84 87 86 m AA Aft 08 
928:S4 86 S4 8K Rl 86 9] 88 
93»:CS m F9 E6 87 E6 89 CA 
938:D8 F2 68 4A 38 E9 81 85 
948:19 .A9 88 A2 4ft A9 8C 28 
948:21 89 A4 19 B9 66 89 85 
95»:»7 B9 6D 89 85 86 A8 08 
95K:B1 86 99 80 48 C8 Ctt 48 
968:08 F6 4C A6 8E BC BC BD 
968 :BD BE BE BF BF 88 88 84 
978:88 80 88 80 88 



0900- 


20 58 FC 


JSR 


$FC58 


0903- 


A0 40 


LDY 


«40 


0905- 


A2 B0 


LDX 


sm 


0907- 


A9 10 


LDA 


SS10 


0909- 


20 21 09 


JSR 


$0921 


090C- 


A0 23 


LDY 


am 


090E- 


A2 94 


LDX 


S$94 



itii mil 



ifri 



nnnniTTir 



rrnmnirnnini 



irimnininininini 



iiiiiiiiiiiiiiiiiiiiiiii 



inrnnnFii Hi 



ram <: 



;iiEli:ii=ir:ii:ii=ii=i 



Eu,.e™ 



EUEL 20 



iiiiiiiiiiiil 



■El 



0910- 


A9 LB 


LDA 


«}1B 


0912- 


20 21 09 


JSR 


$9921 


0915- 


2C 50 C0 


BIT 


iC050 


0918- 


2C 57 C0 


BIT 


5C057 


09 IB- 


ZC 54 C0 


BIT 


$C054 


091E- 


4C A6 8£ 


m? 


SeEA6 


0921- 


84 07 


STV 


iS7 


0923- 


86 09 


SIX 


$09 


0925- 


AA 


TAX 




0926- 


A0 00 


LDV 


*J00 


0928- 


84 06 


STY 


S06 


092A- 


84 08 


STY 


S08 


092C- 


BI 06 


LDA 


(106), V 


092E- 


91 08 


STA 


(i08),V 


0930- 


C8 


JNY 




0931- 


00 F9 


BNE 


S092C 


0933- 


E6 07 


INC 


S07 


0935- 


£6 09 


INC 


S09. 


0937- 


CA 


DEX 




0938- 


00 F2 


BNE 


$092C 


093A. 


60 


RTS 




093B- 


4A 


ISR 




093C- 


38 


SEC 




093D- 


E9 01 


SBC 


mi 


093F- 


85 19 


STA 


$19 


0941- 


A0 B0 


LDV 


S$E0 


0943- 


A2 40 


LDX 


SS40 


0945- 


A9 0C 


LDA 


s$0C 


0947- 


20 21 09 


JSR 


10921 


094A- 


A4 19 


LDV 


$19 


094C- 


B9 56 09 


LDA 


$0966. Y 


094F- 


SS 07 


STA 


$07 


0951- 


B9 6D 09 


LDA 


10960. Y 


0954- 


85 06 


STA 


$05 


0956- 


A0 00 


LOY 


SS00 


0958- 


Bl 06 


LDA 


($06).y 


095A- 


99 00 40 


STA 


$4000. Y 


095D- 


CE 


INY 




095E- 


C0 48 


CPY 


fJS48 


0960- 


D0 F6 


BNE 


$0958 


0952- 


4C A6 BE 


JMP 


$8EA6 


0965- 


BC BC BD 


LDV 


$BDBC,X 


0968- 


BD BE BE 


LDA 


$GEBE,X 


096E- 


BF 


IV. 




096C- 


BF 


?T? 




0960- 


00 


BRK 




096E- 


80 


??? 




096F- 


00 


BRK 




0970- 


80 


??? 




0971- 


00 


BRK 




0972- 


80 


?17 


' 


0973- 


00 


BRK 




0974- 


60 


??? 





i i i ii i mH ii i i n ii i ii i ii i i i iii n iiii i i ii iiiil ll Fiinininininininiii 

ii'ii ii'ii II '"II ini «, [^ t^ d d [^ 5 



2) Make the following memory patches to the 
niam program of Cyelod: 

8262:20 3B 89 
825E:80 F,A EA RA 
828F:efl 

3) Save the entire thing and test it out. 
"A964:I'I'"' allows DOS to BSAVE morx: than 
S7F pages. 

BLOAD CYCL0D.DATA,A$4Cee 

A964;FF 

BSAVE CYCLOD,A$9ee,L$8D08 

DELETE CVCLOD.DAIA 

There! You've got your own unprotected 
Cyciod. You can re-iise Disk I. Cyciod should 
end up to be a 144 sector binary fde. 

s 



tv 



COMPUTIST No, 38 



15 

V 



Track dovwn those pesky variables inr ith. 



Appavarex 



by El wood J.C. Kureth 



R£(juircincnts: 

Applesoft 

A program to he debugged 

One of the mtnoi" inconveniences a 
programmer faces; when coding ffi Applesoft is 
the fact tliai Applesoft recognises only tlie first 
two characters of a variable name, COMPARE 
and COUNT equate to the same variable name 
as tar as Applesoft is concerned, even though 
tlie programmer may intend for them to be 
totally different. This fact makes programming 
in Applesoft somewliut frustrating because the 
programmer must keep a much closer watch on 
what variable combinations have been used. 

In Other versions of BASIC, KEEPTRACKl 
and KEEPTRACK2 would be recognized as 
separate variable names witii (perhaps) different 
values. While the chances of someone 
mistakenly duplicating KEEPTRACKl as a 
variable name are slim, it would be very easy 
to unknowingly dupliuule the first two letters 
of KEEPTRACK 1 , with a variable name such 
as KEY BSD. 

One solution to the problem of keeping track 
of variable names in Applesoft is to use a 
lettering system such as AAnamc. ABnamc, 
ACname, etc. Use the first two letters to 
distinguish the variable name, and use the 
remaining letters to identify the variable's 
purpose. This solution certainly works, but even 
so it's still possible to forget the la.^t letter 
combination used. 

It was for the reasons previously mentioned 
that 1 decided to write a short routine that would 
help me keep track of my variable names. It 
would list the na:iies and, more iiiiporEandy. all 
the line numbers where die name occurred. 

First Thoughts 

My original idea was to code the program 
in Applesoft and recode it in machine language. 
But after creating [he Applesoft version, 1 
thought others might like to see how the 
program works, and at the same time gain an 
understanding of how a BASIC program is 
Stored in piogram text. So here, then, is the 



BASIC program I call Appavarex, and an 
explanation of its workings. The machine code 
version may be presented in a flimre is.sue. 

About BASIC... 

Before we look at Appavarex, let's take a 
quick look at how Applesoft stores a BASIC 
program in memory. It's important to 
understand how it's done if you are to 
understand the workings of Appavarex. 

I^t's say, you key the following: 

10REMOEMO20PRIffr"DEMO"39FORX=lTQ5;PRirfr 
X;NEXT;(4liiEND 

Unless the programmer specifies where the 
program is to be stored in memory, the 
computer will begin storage at location S801 , 
or 2049 in decimal. Since most people arc used 
to working with numbers in decimal format, all 
numbers wdl be displayed as deeimal. Here's 
how the program would be stored in memory: 



Addr 


Val 


TrnsI 


Addr 


Val 


TrnsI 


2049 


12 




2050 


24 




2050 


e 




2061 


8 




2051 


10 


10 


2062 


20 


20 


2052 







2063 







2053 


178 


REM 


2064 


186 


PRINT 


2054 


32 




2055 


34 


" 


2055 


68 


D 


2056 


68 


D 


2056 


69 


E 


2067 


59 


£ 


205? 


77 


M 


2068 


77 


H 


zmi 


79 





2069 


79 





205S 







2070 
2071 


34 



11 


Addr 


Val 


TrnsI 


Addr 


Val 


TrnsI 


2072 


41 




2089 


47 




2073 


8 




2090 


8 




2074 


30 


30 


2091 


40 


40 


2075 







2092 







2076 


129 


FOR 


2093 


128 


END 


2077 


88 


X 


2094 







2078 


208 


= 








2079 


49 


1 


2095 







2080 


193 


TO 


2096 







2081 


53 


5 








2082 


58 










2083 


186 


PRINT 








2084 


88 


X 








2086 


58 










208S 


130 


NEXT 








2987 


88 


X 








2088 














In the above table, "Addr" is the address 
in memory, '"Val" is the value stored at that 
location and Tranjir' is the BASIC code. 

Each line of text that you type (that is, 
terminated with a RETURN) !s called a record 
in program text. The first two bytes of each 
record point to the next record in memorj' . The 
bytes are in low byte/liigh byte order. In the 
example above, the 13 and 8 equate to 2060 (12 
+ (256*8)). Location 2060 then, is the starting 
location of the next record. The above table 
verifies this. 

The next two bytes of each record represent 
the BASIC line number. These two bytes are 
also in low/high order. In the example above, 
the 10 and equate to 10 ( 10 + (256*0)). the 
first line number used in the demo program. 

Each reserved word in .Applesoft, .'iueh as 
REM, PRINT. FOR. NF.XT and END is 
represented by a single byte called a token. In 
the example above, REM is represented by 178. 
All Applesoft tokens have a value greater tiiun 
127. 

The remainder of the program is represented 
by an ASCII value. For example, $ = 61, A 
= 65, " = 34 and I = 49. As stated in the 
preceding paragraph, reserved words are 
represented by a one byte number. Even ll rough 
the reserved word REM is represented hy the 
number 178, the letters R, E, and M have 
ASCII values of 82, 69 and 77, respectively. 
It's only when letters are grouped together m 
form a reserved word that they lose their 
individual ASCII identity. Look at the table 
above to see other A.SCII values for program 
characters. 

The end of each record is indicated by a zero 
byte. Two consecutive zero bytes signal the end 
of program text. 

Enter the Realm 

That's essentially all there is to program text. 
And now, armed with an understanding of 
BASIC program storage, let us venwre forth 
into the realm of Appavarex, 

You will find the complete listing of the 
Appavarex program at the end of this article, 
but as we go through the program here 1 will 
break it down mlo sections for ease of 
explanation. So let's begin. 

120DIMNAME$(200),LINES{200) 

130 NUM = 1 

140 ADDRESS = 2049 
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Line I2fl dimensions two subscripted 
variables tliat are used in the program. These 
variables will be explained as we run across 
them in the program. Line 130 simply initializes 
a key variable. MUM, which Is used a.s a 
counting meehanism (to increase the subscript 
number of the subscripted variables). Line I4W 
sets tlie address tu be read from to 2949. This 
is the Msnal starting place for a BASIC program. 

150 QUOTE = 0:DlTA = 0;RieM = 

160 LINE = PEEK (ADDRESS + 2} + 256 * PEEK 

(ADDRESS t 3) 
170VTAB 12. HTAB2L PRINTLINE 
180 NXTLINE = PEEK (ADDRESS) + 256 * PEEK 

(ADDRESS + 1) 
190 ADDRESS = ADDRESS + 4 

Lines 150 through 19fl are executed before 
eaeh program line that is scanned for variables. 
First, the quote flag, data flag and rem flag 
(QUOTE. DITA. RIEM) are cleared which 
means that we are not between quotes, after a 
DATA statement or after a REM slutement. 
Next, the line number of the current BASIC line 
is calculated and stored in the variable LINE. 
The line number calculated in line 150 is then 
printed on die screen so tliat you can see that 
Appavarex is working. N XT LINE is then 
equated to the starting memory location of the 
next program line. Finally, 4 is added to the 
address pointer so that it is pointing to the first 
byte in the BASIC program line. 

200 BVTF = PFEK (ADDRESS) 

2 10 I F BYTE = 58 AMD NOT QUOTE AND NOT RIEH THEN 

D1TA = ; GOTO 260 
220 I F GVTE = 34 THEN QUOTE = 1 -QUOTE : SOTO 260 
230 I F 8YTE = 1?3 THEN R1£M = I : GOTO ZW 
240 i F BYTE = 131 THEN DITA = 1 : GOTO 250 
250 I F BYTE > 64 AND BYTE < 91 AND NOT QUOTE AND 

NOT DITA AND NOT RIEM THEN 390 
260 ADDRESS = ADDRESS +1 

We now enter the main line scan loop. Line 
2M simply equates BYTE to the value found 
at the current address wc arc scanning. 

Line 210 tests for a colon. If a colon is found 
and it is not between quotes and not after a REM 
command, dien the data Hag is cleared. This 
is done in case the program we are scanning 
has data and program code on the same line. 

Line 228 tests for a quote. If one is found, 
then the quote flag is toggled (from to 1 or 
from 1 to 0). During the operation of the 
program, if QUOTE is equal lo 1 , then wc arc 
between quote.s. 

Line 230 tests for a REM command. Even 
though the REM word is tokenized. any 
uhuracters after it will appear as individial 
ASCn values. If a REM is found, we must 
therefore turn on a flag so that the bytes 
following the REM won't be mistaken as 
variable names. The rem flag is only cleared 
by line 150 so it will stay on until then next line 
is scanned. 

Line 240 tests for a DATA command word 
and for the same reason as the rem flag is mmed 
on, turns on the data flag if one is found. 

Line 250 tests to see if the byte we are on 
is the start of a variable name by first checking 
to sec it It is in the A through Z range (65 - 



90) and secondly, making sure we aren't 
between quotes, after a DATA statement or 
after a REM statement. If all these conditions 
arc true, then the execution continues at line 
300 where the variable and the line it was found 
on will be collected into the arrays. We'll talk 
abnui the routine at 300 later. 

Line 260 increments the address pointer so 
that we can look at the next byte in the program 
code, 

27a IF ADDRESS < NXTLINE - 1 THEN 200 

280 I F PEEK (ADDRESS) = AND PEEK (ADDRESS+I) 

= THEN 440 
290 ADDRESS - ADDRESS +1 : GOTO 150 

Line 270 checks to see if we are at the start 
of the next line yet. If we ai'e not. then execution 
continues at line 200 where the next byte of 
program code is evaluated 

When execution hits line 280, we are at the 
start of a new line. Line 280 therefore 
determines whether or not there are two 
consecutive zero bytes. If so, Appavarex has 
reached the end of the BASIC program and 
jumps to line 440 where it begins preparing the 
variables and hne numbers for display. More 
on that later. 

At line 290, since we are not yet through with 
all of the program text, the address is 
incremented by one (to skip over the end of 
record iero byte) and exeeudon continues at the 
main scan loop, 

300NAME$ = "" 

310 NAMEi = NAMES -;- CHR$(BYTE) 

329 I F BYTE = 35 AND PEEK (ADDRESS+1 ) <> 40 THEN 

ADDRESS = ADDRESS + 1 ■ GOTO 390 
330 ADDRESS = ADDRESS + 1 BYTE = PEEK (ADDRESS) 
340 I F BYTE = 40 THEN NAMES = NAMES t " ( * ) " ; 

ADDRESS = ADDRESS +1 : GOTO 330 
350 IF BYTE < 36 OR BYTE > 90 THEN 390 
360 I F BYTE > 37 AND BYTE < 48 THEN 390 
370 I F BYTE > 57 AND BYTE < 65 THEN 390 
380 GOTO 310 

This series of lines seeks out the name of the 
variable we have found and places it in 
NAMES. Line 300 simply nulls the string that 
will contain the variable name. 

[.,ine 310 adds to the end of NAME$ the 
ASCII character at the current address which 
is part of the variable name- 
Line 320 checks to see if the character we 
just added to the string was a dollar sign and 
that it isn't followed by an open parenthesis. 
If this is the ca'se, then the variable we just got 
the name for is a string type and execution 
continues at 390. This line is here so that a 
command similar to "PRINT D$AS" will 
register both D.S and AS rather than one variable 
named D$A$, 

Line 330 increments itie current address and 
sets B'^E equal to the value found at the 
current address. 

Line 340 checks for an open parenthesis, if 
one is found, then the variable name is an array 
type and the symbols "(*)" are added to the 
end of the niniie. Execution then continues at 
390. 

Lines 350 through 370 check the appropriate 
ranges to insure that the next byte is still part 



of the variable name. If any of the IF statements 
in lines 350 through .370 are true, then the next 
byte is not part ol the variable's name and 
execution continues at line 390. 

Line 380 goes to 3 IB to add the character to 
the name of the variable since it checked oul 
correctly, , 

390 FOR CHECK = 1 TO NUM - 1 

400 IF NAMES = NAMES (CHECK) THEN LINE$(.CHECK) 

= L I NE ( CHECK) + STRM L I NE) + " " : CHECK = 

NUM : NEXT : GOTO 270 
410 NEXT 
420 NAMEt(NUH) = NAMES ' LIN£${NUM) = 

STR$(LINE) + ■' " 
430 NUM = NUM +1 : GOTO 270 

Once a character other than a letter or a 
number has been found. Appavarex has reached 
the end of the variable name. The program 
jumps to line 390, where the variable name 
contained in NAMES is compared with all the 
variable names found so far. 

If the variable is not found, its name is 
dumped into a subscripted variable called 
NAME$(NUM) and the string equivalent of the 
line where it was found Is put into the array 
LINES (this occurs in line 420), The counter 
of the number of variables found is incremented 
and control goes back into the main scan loop. 

If the variable name has already been found, 
then line 400 adds to the LINES that is 
a.iisociated with the variable name, the string 
equivalent of the line number where the other 
occurrance of the variable was found (the 
current line), 

440 VlAB 12: HTAB 1; PRINT "SORTING DATA" SPC 

(40) 
450 FLAG = 

460 FOR CHECK = i TO NUM -2 
470 IFNAMES(CHECK)<NAMES(CHECKtl) THEN 500 
480 FLAG = 1: TEMPS = NAMES(CHECK) ' 

NAHEKCHECK) = NAMESiCHECK + 1), 

NAME$(CHECK+ 1) = TEMP5 
490 TEMPS = LINE5(CHECK): LINEJ(CHECK) = 

LINES(CHECK+1}:LINES(CHECK+1)= TEMPS 
500 NEXT: I F FLAG THEN 450 

Once the end of program text has been 
reached, the main control loop directs 
Appavarex to LINE 450, At this point all 
variable names and theii tine numbeis have 
been identified, h is now necessary to son the 
names in alphabetical order. Lines 450 through 
500 are a typical bubble .sort routine. 

The reniauidei of the program is pretty 
Straight forward. Lines 510 through 530 ask you 
what the name of die program you are 
examining and whether you want the printer on 
during print out or not. 

Lines 540 through 590 simply print the 
variable names and their corresponding line 
numbers. One point to note is that if a variable 
name appears more than once in a BASIC 
program line, that line number will appear after 
the variable name the same number of limes the 
name appears in the line. Example: 

COUNT - 16 



In this example, the variable name COUNT 
appears in lines 15, 8000 (twice) and line 8010. 
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Typing it Fn 

Brsi, lype in Die Appavare^ program and 
save it: 

SAVE APPAVAREX 

Nexi. type in the Install Maker program. 
When this program is run, it will creaie u text 
file that can be EXECed. This text file moves 
the pointer to the stan of BASIC text after any 
program ihat liappens to be in memory and then 
RUNS Appavarex. 

Using Appavarex 

Always type 

FP 

before using Appavarex! This sets the start of 
BASIC pointer to SKWI (2049), whieh is where 
line 140 is expecting to find the start of the 
program. It" you just 

RUN APPAVAREX 

it will document the variables used in itself. Try 
It, You should get: 

NAME OF FILE;APPAVAREX 

ADDRESS - 140 160 160 180 183 130 190 200 
260 260 270 380 3S0 290 290 320 329 320 
330 330 330 340 340 



BYTE - £00 210 220 230 240 250 250 310 320 
339 340 360 3b0 360 360 370 370 



CHECK - 390 400 400 400 400 460 470 470 
480 480 480 480 490 490 490 490 550 550 
560 580 



DITA - 150 210 240 250 



FLAG - 450 439 590 



LINE - 160 170 480 420 



LINES(*> - l2Si 400 400 420 490 490 490 
490 

560 



NAME? - 300 310 319 340 349 490 420 520 

540 



NAME$(*) - 120 400 420 479 470 480 480 
480 

480 560 



NUM - 130 390 400 420 420 430 430 450 550 

NXTLINE - 180 270 

QUOTE - 150 210 220 220 250 

RIEM - 150 210 230 250 

TEMPJ - 480 480 490 490 530 530 



To document the variables of another 
program, first type FP and then 

LOAD program 

where "program* ' is the name of the program 
you wish to document. Finally, type: 

EXEC INSTALL 



This will move the start of BASIC pointer to 
the end of the program in memory and run 
Appavarex. When you're done, it is a good idea 
to type: 

FP 

again to insure that tlie start of BASIC pointer 
is correctly set. 

In the Future... 

I am currently working on a tnachine 
language version of Appavarex, h may be 
published in an upcomming issue of 
COMPUTIST. Until then, I hope you have 
enjoyed this trip down "memory" lane. 

Appavarex 



10 REM APPLESOFT 
20 REM PROGRAM 



VARIABLE 
EXTRACTOR 



30 REM 
40 REM 
50 REM 
60 REM BY 

70 REM 
80 REM 

90 REM 
100 TEXT 
HTAB 12 

n0VTAB12 ■ PRINT 
120DIMNAMEI(200) 



ELWOOD J C KURETH 



PRIMT ; 
KURETH" 



HOME : PRINT "APPAVAREX" 
PRINT"BY°ELHOOD'J,C 

NOW^ WORKING' ON' LINE 

,LINEV200) 



130 NUM - 1 

140 ADDRESS = 2049 

150 QUOTE = -DITA^O :R1EM = 

160 LINE = PEEK (ADDRESS 4 2 ) t 2BG * PEEK 

(ADDRESS+3) 
170VTAB12 ; HTAB 21 ; PRINTLINE 
180 NXTLINE = PEEK (ADDRESS ) + 255 * PEEK 

(ADDRESS + 1 ) 
1S0 ADDRESS = ADDRESS + 4 
200 BYTE ^ PEEK (ADDRESS ) 
210 I F BYTE = 58 AND NOT QUOTE AND NOT Rl EH THEN 

D1TA = : GOTO 250 
220 I F BYTE = 34 THEN QUOTE = 1 - QUOTE ■ GOTO 260 
230 IFByTE=I7STHENRlEM = l . GOTO 260 
240 I F BYTE = 131 THEN DITA = 1 : GOTO 260 
250 I F BYTE > 64 AND BYTE ^ 9 1 AND NOT QUOTE AND 

NOT DITA AND NOT RIEM THEN 300 
260 ADDRESS = ADDRESS 1 1 
270 [ F ADDRESS < NXTL I NE - 1 THEN 200 
280 IF PEEK (ADDRESS ) = AND PEEK (ADDRESS + 1 

) = THEN 440 
290 ADDRESS = ADDRESS + 1 . GOTO 150 

390 NAME! = 

310 NAME} = NAME* + CHRt (BYTE) 

3 20 I F BYTE = 36 AND PEEK (ADDRESS + 1 ) <> 40 THEN 

ADDRESS = ADDRESS t 1 . GOTO 390 
330 ADDRESS = ADDRESS + I : BYTE = PEEK (ADDRESS ) 
340 IF BYTE - 40 THEN NAMEI = NAMES t ■'(*)" 

:ADORESS = ADDRESS + 1 : GOTO 390 
350 I F BYTE < 36 OR BYTE > 90 THEN 390 
360 I F BYTE > 37 AND BYTE < 48 THEN 390 

379 I F BYTE > 57 AND BYTE < 65 THEN 390 

380 GOTO 319 

399 FOR CHECK = 1 TO NUM - 1 

400 I F NAME$ = NAMEi (CHECK ) THEN L I NE$ (CHECK ) 

= LINE$(CHECK)+STRUL1NE ) + '■'" :CHECK 

= NUM : NEXT : GOTO 270 
410 NEXT 
420NAMEJ(NUM)=NAME$;LINES(NUM)=STRJ(LINE 

) + "" " 
430 NUM = NUM + 1 : GOTO 270 



440VTAB12 : HTABl ; PRINT "SORTINS* DATA" SPC( 

40) 
450 FLAG = 

460 FOR CHECK = 1 TO NUM -2 '" 

470 I F NAMEI (CHECK ) < NAMES (CHECK + I ) THEN 500 
480FLAG=! 'TRMPt = NAME$( CHECK ) :NAME$(CHECK 

) = NAMES (CHECK + 1 ) ;NAMES(CHECK + 1 ) - 

TEMP} 

490 TEHPJ = LINES (CHECK ) .LINEJ(CHECK ) = 

LINE}(CHECK+1) :LIN£S(CHECK + 1) =TEMP} 
500 NEXT : IF FLAG THEN 450 
510 HOME : NORMAL ; PRINT "APPAVAREX' -' ti^° 

ElwQod'J.C.'Kureth" 
520 VTAE4 ; INPUT "NAME* OF' FILE=>" ; NAMES 
530 PRINT : PRINT : INPUT "TURN" ON" PR INTER? " 

. TEMP} . I F LEFTS (TEMP} , 1 ) = "Y" THEN PR# 

1 
B49 HOME : PR I NT "NAME" OF* F I LE : " NAME J : PR I NT 

; PRINT . • 

550 FOR CHECK = I TO NUM - 1 
560 PRINT NAMES (CHECK )•"■-" " LINES (CHECK ) 

570 PRINT " " 

580 NEXT CHECK 
590PR(f0 : END 



Install Maker 

10 PRINT CHRS (4 ) "OPEN" INSTALL" ; PRINT &IRS 

(4 ) "WRITE" INSTALL" 
20FORA=1TO4: REAOA$ ; PRINT A$ ; NEXT 
30 PR I NT CHRS (4) "CLOSE" 
40 DATA "P0KE(PEEK(176)+1) *256,0" 
50 DATA "POKE 104. PEEK (176)+!" 
60 DATA NEW , RUN" APPAVAREX 



Appavar«x 


checksums 


10 


- SBADD 


310 


- SElFa 


20 


- I9E13 


320 


■ S9983 


30 


- J4D3B 


330 


- S2179 


40 


- tAD92 


340 


- $9023 


50 


- $C899 


350 


- I20DD 


50 


- SFF55 


360 


- $£888 


70 


- SA3BF 


370 


- IBCAl 


80 


- SA900 


380 


- }8B82 


90 


- $924D 


390 


- I5C3A 


100 


- J9EB2 


400 


- S49AA 


110 


- tBC38 


410 


- SA200 


120 


- JABflD 


420 


- SC40B 


130 


- S559A 


430 


- $2E92 


140 


- $D90B 


440 


- $A564 


150 


- S26B6 


450 


- S479E 


160 


- S60B6 


460 


~ SB627 


170 


- SE9E6 


470 


- S9AC9 


180 


- $E9CD 


480 


- SCE52 


190 


- }B166 


490 


- SB715 


200 


- SE067 


500 


- $6776 


210 


- SF42F 


510 


- }A510 


220 


- $117B 


520 


- IEC34 


230 


- $B0A2 


530 


- SB3A4 


240 


- $493D 


540 


- }7a5a 


250 


- $5E04 


550 


- JFEE3 


260 


- S1B05 


560 


- }3A63 


270 


- $368A 


570 


- }D237 


280 


- IF047 


580 


- S9B27 


299 


- J61CF 


590 


- $D80C 


300 


- I8A03 




% 
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softkey for... 



Alternate Reality 



by Stephen Lau 



Scanning this code, 1 found the following; 

J686F: 



Datasoft Inc. 

942} Winnetka Ave 

Chamwartk, CA 9J31I 

Rctjuircmcntii: 

Apple ][ with 64K 
Super lOB vl.5 

Alternate Reality is the first in a new series 
of fantasy games by Datasoft, Because of the 
large amount of disk access during the game, 
I decided to make a backup copy of it. BDD 
will produce a copy that will constantly tell you 
to in.iert the original disk during play This then 
prompted me to deprotect the program. 

Going About It 

Using the CIA. I found that track 0, sector 
of both sides are norma] and all the other 
sectors on the disk have a bad field data 
ehttcksum. Next, I booted the disk, Resetted 
into the monitor when the text logo appeared 
and scanned throng ti memory. 

I found u working copy of the RWTS starting 
at S8M instead of $B8M, When I compared this 
RWTS with the normal one, I found that only 
one significant byte (in the translate table) had 
been chaiiged. This then explained the bad data 
field checksum. 

1 then created a Super iOB controller that 
read with the strange translate table and wrote 
with the correct one. Unfortunately, the 
resulting disk wouldn't hoot. 

The Nitty Gritty 

It was then time to get tough with the disk, 
so I challenged it to a boot code trace, I quickly 
found the code that modifies the normal 
translate table at $36C-$3D5 (created by a 
rotJtinc in the disk controller card before the 
boot process) to read the strange sectors on ray 
Alternate Reality disk. After NOPing the bytes 
that alter the translation table, die disk booted 
all the way to the main menu and the dreaded 
"Insert the origin.rl disk" message appearred. 

My Replay card then told me that the 
program was ninoiug soraewhcre near S68AB. 



BIT $C054 




BIT icm 


DISPLAY HI-RES 


BIT SC057 


PAGE 1 


BIT SC052 




BIT $C081 


WRITE ENABLE 


BIT $C081 


THE RAM CARD 


JSR $6F6E 


CLEAR HI -RES SCREEN 


JSR $744F 


CHECK THE DISK 


BCC I68B9 


IF OK THEN 




BRANCH TO J63B9 



controller 



To defeat this. 1 changed the JSR $744F to 
a IMP S68B9. This worked until 1 entered an 
inn. Using similar techniques, I discovered that 
another disk check was at $D2F9 which does 
a JSR to !EDK5H, Removing this in a similar 
fashion produced a seemingly perfect backup, 

I then discovered that the "Backup" ftinction 
provided on Alternate Reality would not work. 
So, after a little more work I came up with a 
few sector edits that fixed this minor difficulty. 
I then incorporated all these sector edits into 
ray Super IOB controller and the result! tig disk 
worked perfecdy! 

Step by Step 

1) Capmre the RWTS by boot code tracing tlie 
original disk. 

CALL -151 

96e9<C6e«.C6F7M 

<)6FS:A9 4B 8D 61 »« A9 58 8D 

97»e:62 m A9 ¥K 8U 63 »8 4C 

9f,mG 

19m<&m.F¥FM 

Insert your original disk and type: 

6 BP] 
CALL -151 
29»9<B8ee.BFFFM 
2B29<1B29.1BFFM 

BbI 

BSAVE ALT.RWTS,A$29»»,L$8fl» 

2) Type in the controller at the end of this article 
and use it to deprotect Alternate Reality. 

3) Remeber to format the boot side with a 
volume of 2 and the other side with a volume 
of 3, 

That's it, have fun with yoar backup! 



1000 REM ALTERNATE REALITY 

1002 TEXT ; HOME : PRINT "BOOT' SIDE' OR^ SI DE^ 

TV(o" r " : 

1003 GET A$ ■ IFAio "B' ANDAJ <:>''2"THEN 1002 
1004 BK = : IFAS = "2"THENBK=1 
1006 POKE 775 .96 : ONERR GOTO 550 
1010TK = :LT = 35 ;ST= 15 :LS= 15 :CD = WR .FAST 
= 1 

1020 GOSUB 360 : GOSUB 490 : GOSUB 610 

1021 IF BK THEN 1030 

1022 I F TK = THEN GOSUS 5000 
1024 IFTK= 14 THEN GOSUB 5010 
1026 I FTK- 2] THEN GOSUB 5020 

1030 G0SU8 360 . GOSUB 490 : GOSUB 610 , IF PEEK 

(TRK ) = LT THEN 1050 
1040TK = PEEK(TRK) : ST = PEEK (SCT ) ; GOTO 1020 
1050 POKE 775 ,W6-TK = :LT=1 ■ST = :LS=15 

.CD = m :FAST = 
1050 GOSUB 490: GOSUB 510 
1065 I FBK-0 THEN GOSUB 5030 
1070 GOSUB 450 ■ GOSUB 610 
1080 HOME : PRINT -COPYOONf : END 
5000 A$ = "3429:96" 97" N" 3449:06" D7* N* 

3495:0M"N"34D6-20"2r' ■ GOTO 5040 
5010 AS = "29 7B:EA' EA" EA" EA' EA" EA" EA" EA" 

EA" EA" EA" EA" N' 298E : EA'^A" EA' EA' EA° 

EA* EA° EA° EA' EA'' EA" E^50TO 5040 
5020 A$ = "4D84 : EA" EA' EA" FO" N= G9F9 :EA'' EA" 

EA''F0" . GOTO 5040 
5030 A? = "2707 ;EA' EA" EA" EA" EA" EA" N" 

2727:E9'E9'E9"E9"E9'E9" 
5040 AS = AJ + "" N' D9C6G" : FOR A = 1 TO LEN {A| 

) :P0KE511 + A.ASC(HID$(At ,A,1) )+128 
5050 NEXT : POKE /2 ,0 : CALL- 144 : RETURN ^ 

10010 PRINT CHRS (4 ) "BLOAD" ALT.RIVT^A^j^OO 



coniroiler check^iiiinN 



1002 
1003 



1006 
1010 
1020 
1021 
1022 
1024 
1026 
1030 
1040 



- $356B 

- $E297 

- $0074 

- t6ABl 

- $0045 

- $A3AC 

- $4EE1 

- J1952 

- nm 

■ $AA90 

- $F759 

- SC6CD 

- SFSEB 



1050 
1060 
1065 

1070 
1080 
5000 
5010 
5020 
5030 
5040 
5050 

10010 



i43E3 

f0ED6 
ID153 
$3660 
$F821 
$C1FB 
J09F9 
$B89e 
$3AF8 
IF792 
J326B 
$E8EF 



i 
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Adding to DOS 3.3 a... 

RAMdisk 



by Robert Knowles 



Requirements: 

Apple //e with extended 80 column card 
DOS 3.3 or similar 

If you have an extended 80 column card (64K 
or more) and ProDOS, you may have had a 
chance to use the /RAM volume ProDOS 
aulomatitally installs in the auxiliary RAM. 
Slick, isn't itV Well, if you don't tiave, don't 
like, or caji't use PraDOS, you can still use the 
extra RAM as a simulated disk drive under DOS 
3.3. This article will show you how to use most 
of thai RAM as a RAMdisk with a short 
relocatable routine that intercepts the RWTS 
and fools DOS into thinking there is a disk drive 
in slot 3 (or wherever). 

The Aux RAM 

Normally, the auxiliary {"aux" or "card") 
RAM camiot be used by Applesoft or DOS 3.3. 
You probably found this out ajier you bought 
it. Machine language programming is required 
to get the most out of the aux RAM. This part 
of the article is not uecessary for tlie proper care 
and feeding of the RAMdisk, but may help in 
understanding what's going on. 

If you followed through the article "More 
Rom Running" by Wes Felty (COMPUTIST 
No. 34), you should be familiar with how the 
language card built into the //e and //c works. 
The language card parallels the Apple's ROM 
space with 12K of RAM, which you can write 
data to while reading from the ROM, or select 
to replace the ROM. Tlie auxiliary RAM works 
in a similar manner. The aux RAM can be 
thought of as having a second language card and 
a second lower 4RK of RAM. When you set 
a few soft switches, you can, in effect, replace 
the RAM on the main board with the RAM on 
the 80 column card. The following switches 
affect the read/write stams of the banks: 



address name 



function 



$C002 RDHAINRAM 

$Ce03 RDCARDRAM 

$C004 WRMAINRAM 

$C085 WRCARORAM 



read from main 48K 
read from card 48K 
write to main 
write to card 



SC008 SETSTDZP use main icard/zpage 
$C009 3ETALTZP use aux Icard/zpage 

T!ie Apple starts up with main RAM both read 
and write enabled. When you activate $C&05 



by storing a byte there, your program will be 
able to read from main RAM and write to aux 
RAM. This is handy for copying data from one 
bank to the other. However, if you set SC0fl3, 
your computer wUl crash because it will be 
attempting to run a program that suddenly 
disappears with the RAM it was originally 
reading. A program can only run if the 
computer can read the locations it is stored at. 
To counteract this, you could duplicate your 
whole program to the other bank before you 
switched, but that would be a bit wasteful. 

When the 48K section of the aux RAM is 
selected, ($C003 and $Cm5) the lower 4SK of 
main RAM will be replaced by "the other lower 
48K." If the language card area is switched 
(SCTO9), it will be replaced with "the other 
language card." 

Apple Corp. to the Rescue 

Luckily, Apple has provided ROM routines 
to save us some trouble when moving memory 
and transferring program control between 
banks. At $C311 is a routine called MOVE, or 
AUXMOVE, that works just like the monitor's 
MOVE routine with the exception that the code 
is transferred between banks, the direction of 
the transfer dependent on the carry flag. To 
Operate this, the starting address of the block 
of memory to be moved is stored in locations 
%3C and $3D. The last address to be moved is 
placed at $3E-$3F, aad the target address in the 
opposite bank is placed at S42-$43. If the move 
is from main to auxiliary, the carry flag must 
be set. For the other direction, the carry must 
be clear. Call diis routine with a JSR. 



If you are really adventurous, the last two 
soft switches listed in the table above select 
whether you are using the language card from 
the main RAM or the aux RAM. At the same 
time, the zero page and stack (S000-$1FF) are 
switched also. This means ifial the auxiliary 
language card area will have its own private 
zero page and stack! This also means extreme 
caution is in order when you switch memory 
around. The other aux RAM -related routine is 
called XFER (SC314). When this is called, you 
specify the address in aux or main memory to 
go to, and which language card/ zero page you 
want. Some interesting effects can be perfbnned 
using this. A full discussion of this feature is 
beyond this article for now. You can read more 
about it in the //e Reference Manual. 

Hopefully, Lhal will help clarify a few Uijtigs 
to provide a background for the RAMdisk 
explanation that follows. 

The RAMdisk 

The RAMdisk works by simulating a disk 
drive in slot 3 drive 1 , and storing the ' ' sectors" 
in the auxilinry RAM rather than on a disk. It 
attaches itself to DOS by making DOS' JSR to 
the RWTS entry point to the RAMdisk driver 
instead. When called by DOS, the RAMdisk 
saves the location of the lOB table and checks 
to see if the sector requested is from slot 3. If 
the lOB is not for slot 3 , then it restores the 
processor registers and JuMPs to the original 
RWTS, pretending noiliing has happened. 

If the request IS for slot 3, then it checks to 
see if the drive number is 1 and sets an I/O error 
tf k is not. The "last slot", "la.st drive", and 
"last volume" in the lOB are set up and the 
real fun begins. The track and sector numbers 
are converted into an address for the aux bank 
and stored in the "source start" location 
($3C.$3D) for the ROM routine MOVE 
($C3 1 1). The DOS buffer address is copied to 
the "target address" location ($42,$43). Than 
the RWTS command is checked. If the code is 
$02 (write) then the "source" and "target" are 
swapped so that the data in the buffer will be 
sent to llie aux RAM instead of being fetched 
from the RAM. D' the code is $01 (read) then 



* 

* 






,„_-. — * 

* 




RAMDISK DRIVER 


* 




FOR 128K //E OR //C, DOS 3.3 


* 


* 




BY R.A. KNOWLES 


* 


* 




:OPYRIGHT 1986 SOFTKEV PUBLISHiNG 


* 
* 


C31I- MOVE 


.EQ $0311 


ENTRY PT. FOR CROSSBANK HOVE 




BD00- NXT.RWTS 


EO $BO00 


LOCATION OF REAL R^S 




B7B8- HOLE 


,EQ $E7B8 


LOCATION OF 'JSR ?BO00' 




003C- AIL 


.EQ I3C 


MONITOR SCRATCHPAD LOCATIONS 




003D- AlH 


,EQ $3D 






003E- A2L 


.EQ $3E 






003F- m 


,EQ $3F 






0042- A4L 


-EQ H2 


ALSO USED AS FILENAME POINTER 




0043- A4H 


.EQ S43 

.OR mm 








.TF OBJ. RAMDISK 
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6000 


38 


INSTALL 


SEC 




6001 


AD 00 9D 




LDA $9000 


DROP BUFFERS 8Y LENGTH 


6004 


E9 A9 




sec SLAST-RAHOISK -OF RAMDISK CODE | 


6006 


8D 00 9D 




STA $9D00 




6009 


M) 01 9D 




LDA $9001 




600C 


E9 00 




SBC /LAST-RAMDISK (HI BYTE) | 


600E 


80 01 90 




STA $9001 




6011 


18 




CLC 




6012 


AD 00 90 




LDA $9000 


STORE ^FFER START+$26 AT Al 


6015 


69 26 




ADC M26 




6017 


85 3C 




STA AIL 




6019 


AD 01 90 




LDA $9001 




501C 


69 00 




ADC m 




601 E 


85 30 




STA AlH 




6020 


A0 A9 




LDY SLAST-RAHDISK 


6022 


B9 39 60 


.1 


LDA RAMDISK, Y COPY RAHOISK TO NEW LOC 


6025 


91 3C 




STA (A1L),Y 




6027 


88 




DEY 




6028 


C0 FF 




CPY S$FF 




602A 


D0 F6 




BNE .1 




602C 


Ab 3C 


PATCH 


LDA AIL 


STORE ADDR OF RAMDISK 


602E 


8D B8 B7 




STA HOLE 


IN PLACE OF REAL RWTS' ADDR 


6031 


A5 3D 




LDA AlH 




6033 


8D B9 B7 




$TA HOLE+1 




6036 


4C D3 03 




JMP S3D3 


COLDSTART DOS, RAMDISK IS UP! 


6039 


84 48 


RAMDISK 


STY S48 


STEAL DOS' SPOT FOR STORAGE 


603B 


as 49 




STA $49 




6030 


A0 01 


SLOT 


LDY n: 


FETCH SLOT # FROM lOB 


603F 


Bl 48 




LDA ($48),Y 




6041 


C9 30 




CMP #$30 


SLOT 3? 


6043 


F0 0F 




BEQ SETSLOT 


YEP, CONTINUE BELOH 


6045 


A5 49 


TOJEXT 


LDA $49 


ELSE RESTORE m AND RETURN 


6047 


A4 48 




LDY $48 




6049 


4C 00 BD 




JMP NXT.RffTS 




604C 


A9 40 


lOERR 


LDA #$40 


DRIVE ERR 


604E 


A0 0D 




LDY #$00 




6050 


91 48 




STA (J4S),V 




6052 


38 




SEC 


SHOW ERR BEFORE RETURNING 


6053 


60 




RTS 




6054 


A0 0F 


SETSLOT 


LDY #$0F 




6056 


91 48 




STA ($48) ,Y 


SET 'LAST SLOT' 


6058 


A0 00 




LDY *$0O 




605A 


A9 00 




LDA m 


TURN ERROR INDICATOR OFF 


605C 


91 48 




STA ($48),Y 




606E 


A0 02 


DRIVE 


LDY #2 




6060 


Bl 43 




LDA ($4B),Y 


GET DRIVE NO. 


6052 


C9 01 




CMP #$01 


DRIVE 1? 


6064 


m E6 




BNE lOERR 


NOPE 


6066 


A0 10 




LDV #$10 




6068 


91 48 




STA ($48),Y 


COPY DRIVE NO. TO 'LAST DRIVE' 


605A 


A0 0E 


VOLUME 


LDY #$0E 


SET 'LAST VOLUME' 


60eC 


A9 FE 




LDA #$FE 




6B6E 


91 48 




STA ($48),Y 




6070 


A0 04 


GET. IRK 


LDY #$04 


GET DESIRED TRACK NO, 


6072 


Bl 48 




LDA ($48) ,Y 




6074 


C9 11 




CMP #$U 


H IN. TRACK? 


6075 


90 04 




BCC 10ERR 




6078 


C9 IC 




CMP #$1C 


MAX. TRACK? 


607A 


B0 00 




DCS lOERR 




607C 


A0 05 


GET. SCI 


LDY #$05 


lOB SECTOR 


507E 


Bl 48 




LDA (S48).y 




6080 


29 F0 




AND am 


LESS THAN $10? 


6082 


D0 C8 




BNE lOERR 




6084 


A5 42 


CONVRT 


LOA A4L 


A4 IS USED BY DOS, 


6086 


48 




PHA 


SO WE MUST SAVE IT 


6087 


A5 43 




LDA A4H 




6089 


48 




PHA 





I 



the swap is not made. After that, the carry is 
set for the proper MOVE direction and the 
MOVE routine is called. After the transfer, the 
program returns to DOS with an RTS, 

On the Right Track 

The main puzzle in writing the RAMdisk was 
how best to fake a floppy disk in RAM. 1 
decided tn convert the track and sector numbers 
almost directly into memory addresses. Since 
there are 16 (IMF) sectors per track, the track 
number eould be used as the base address to 
Stan with. However, It was also logical to keep 
track $1 1 in tlie continuous block of RAM so 
that the program would not have to have a 
special routine to simulate track $11. Sooo... 
the high nibble of the track number will be 
ignored and the VTOC of the "disk" will show 
the unuseable sectors as unavailable to DOS. 
The RAMdisk drivei' lakes Uie track number, 
ASLs it (shifts left) four times, which loses the 
four high bits. The sector number is ORed with 
the result, and that is used as the high byte of 
the address. It works out so that track $10 sector 
SB becomes SBBBB in memory, all the way up 
to track $1F sector $F becoming $FFCh3. 

For this program, I did not use all of the 
RAM in the auxiliary bank. To keep the routine 
short, only the memory from $1800 to $BFFF 
is used. The memory above that is m the 
language card ' area. The programming 
headaches involved in copying memory 
between 4K bank 1 of language card RAM and 
4K bank 2 of auxiliary language card RAM 
were not worth the trouble at die time this was 
written. On the lower end of RAM, pages 0-1 
are reserved for the ^ero page and stack, and 
S4m-1F¥ should be set aside for 80 column 
text. These locations eould be reserved by 
marking them as "used" in the VTOC, hut an 
easier method is to simply ignore track $10, 
This pares the RAMdisk space down to tracks 
$11-$1B in its present funn but that's plenty 
for most purposes. 

The Hook 

The RAMdisk program consists of two parts; 
an installer ($6000 - .$6038) and the RAMdisk 
driver ($6039 - $60E1). The RAMdisk driver 
is relatively small and could be tucked almost 
anywhere in RAM (it's written to be location 
independent) provided you correctly hooked it 
to DOS. 

However, if you're like most people, you 
already have a favorite program at $300, and 
if you're using a speed-enhanced DOS, the best 
locations inside DOS are taken. This is why I 
created the installer portion which place.s the 
RAMdisk driver between DOS and its buffers. 
This is accomplished by cheeking the current 
locadon of the DOS buffers, moving them down 
by the length of the RAMdisk driver {$A9 
bytes), and copying the driver to just above the 
new location, allowing S26 extra bytes for the 
DOS buffer's filename. 

To connect the RAMdisk driver to DOS, the 
installer stores the address of the RAMdisk 
driver at location $B7B8, which is the operand 
of the JSR SBDflB instruction at $B7B7, mming 
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it into a JSR $xxx!( (where xxxx is the location 
of the driver) instead. 

The itistaller then re-enters DOS Uirough its 
coldscan vector at $3D3, 

INTTially speaking 

The RAMdisk will not accept the RWTS 
comjTiand code for INITing, returning instead 
with an I/O error. To initialize the RAMdisk, 
a foniiatting routine is provided here (Listing 
#2). It will start by creating two empty catalog 
sectors in track $11, enough room for fourteen 
filenames. It then proceeds to create a VTOC 
for the disk, mukiug it look just like a regular 
floppy, with the exception that only tracks SI 2 
through $1B plu^ the unused sectors in track 
SI 1 are marked as free. DOS' file manager will 
only bother to try to allocate the free sectors, 
and will only be reading sectors from those in 
the track/sector lists with the files, so it won't 
try to use nonexisting sectors. 

Keying it In 

To get your RAMdisk up and ninning, first 
boot up with DOS 3.3 or a fast substitute. Type 
in hexdump # 1 and save it. 

BSAVE RAMDISK,A$6efl«,L$E2 

Type in hexdurup #2 and save it. 
BSAVE RAMFORMAT,A$«»W,L$93 

To use tiie RAMdisk, type (in either order); 

> BRUN RAMDISK 
BRUN RAMFORMAT 

Notes & Cautions 

I hope the RAMdisk will come in handy. 
Most programs should not have any problem 
using it. DiskEdit and Super lOB have both 
been tested on it. and none of your BASIC 
programs should have any trouble. 

Remember, when you modify DOS, the 
changes made to it are passed on to disks 
INITialized after the modification. In this case. 
DOS will carry the patch made to it at $B7B8, 
but the RAMdisk driver itself is not inside DOS. 
Moving it to una^ed space in DOS like at $BE00 
or ihe INIT code are good choices. 

The formatter program uses the ROM's aux 
meraoiy move routine routine at $C31l 
directly, so you don't need to have the 
RAMdisk already running to format the disk. 
Just BRUN it, either before or after you install 
die RAMdisk. 

If you want to use double hi-res graphics, you 
will need to have the formatter mark all of 
tracks $12 and $13 as used so DOS will ignore 
{lie memory from $2000-$4000, If you want to 
use more of the auxiliary RAM as a RAMdisk 
you will need to add a language card handler 
to the RAMdisk. This is not as easy as it looks, 
£^ you will need to keep track of the language 
card's status before, while, and after copying 
RAM. This driver also does not allow for the 
larger 8B column cards like Applied 
Engineering's Raniworks card. 

A fast easy way to save and restore your 
RAMdisk is to use Super lOB to copy tracks 
$1I-$1B to and from a blank disk. The fast 



608A 


A0 04 




LDV *$04 


TURN TRACK 3 SECTOR INTO 




esse 


Bl 48 




LDA ($48), Y 


HI BYTE OF SOURCE ADOR: 




608E 


0A 




ASL 


(ASSUMING READ) ' , 




608F 


0A 




ASL 


HUL TRACK BY 16 




6090 


0A 




ASL 


{iU = Sx0) 




6091 


0A 




ASL 






6092 


CB 




INY 


POINT TO lOB SECTOR* 




5093 


11 48 




ORA ($48) ,Y 


MIX WITH 'TRACK' 




6095 


85 3D 




STA AlH 


STORE TRK&SCT IN Al (SOURCE) 




6097 


A9 00 




LDA Its 






6099 


85 3C 




STA AIL 


SOURCE- lum 




609B 


A0 08 




LDY «$08 


MOVE BUFR ADDR TO A4 (TARGET) 




6090 


Bl 48 




LDA ($48) ,Y 






609F 


85 42 




STA A4L 






60A1 


C8 




INY 






60A2 


Bl 48 




LDA ($48),Y 


\ .; 




60A4 


85 43 




STA A4H 


f 




6flA6 


AS 0C 


GETCMD 


LDY #$0C 


lOB COMMAND 




60AB 


Bl 48 




LDA ($4a),Y 






50AA 


F0 34 




BEQ NOERR 


SEEK CMD. IGNORE 




60AC 


C9 03 




CMP j!(3 


INIT OR GAD CHD? 




60AE 


B0 9C 




BCS lOERR 


THEN EXIT 




6flB0 


C9 01 




CMP HI 


READ! 




6flB2 


F0 10 




BEO MAKE.A2 


DON'T SWAP IF SO 




50B4 


A5 3C 


SHAPADRS 


LDA AIL 


■WRITE' GOES OTHER HAY 




60B6 


A6 42 




LDX A4L 


SO ADDRESSES MUST BE 




60B8 


85 42 




STA A4L 


SWITCHED 




60BA 


86 3C 




STX AIL 






60BC 


A5 3Q 




LOA AIH 






60BE 


A6 43 




LDX A4H 






60C0 


85 43 




STA A4H 






G0C2 


86 3D 




STX AlH 






60C4 


18 


HAKE.A2 


CLC 






60C5 


A9 FF 




LDA #SFF 


ADD SFF TO SOURCE (Al) 




60C7 


65 3C 




AK AIL 


TO CREATE SOURCE. END 




60C9 


85 3E 




STA A2L 






60CB 


A9 00 




LDA »S 






60CD 


65 3D 




ADC AlH 






60CF 


85 3F 




STA A2H 






60D1 


AD 0C 


fiD.WRT 


LOY #$0C 


GET COMMAND CODE AGAIN 




60D3 


Bl 48 




LDA ($48) ,Y 






60D5 


C9 02 




CMP #2 


CARRY WILL BESET IF 'WRITE' 




60D7 


20 11 C3 




JSR MOVE 


COPY SECTOR TO BUFFER OR V. VERSA 




50DA 


68 




PLA 






60DB 


85 43 




STA A4H 


RESTORE A4 TO PREVIOUS STATE 




60DD 


68 




PLA 






60DE 


85 42 




STA A4L 






60E0 


18 


NOERR 


CLC 






60E1 


60 
LAST 


.EN 


RTS 












The Ram Formatter 




* 




RAMDISK FORMATTER FOR 'RAMDISK' PROGRAM 


^ 


* 






BY 


R.A, KNOWLES 


* 


* 






COPVRIfiHT 1986 SOFTKEY PUBLISHING 


♦ 


C311- 


- HOVE 


.EQ SCSll 


COPY MAIN TO AUX RAM 




e03c- 


■ AIL 


.EQ $3C 


MONITOR SCRATCH LOCATIONS 




003D- 


■ AlH 


EQ $3D 








003E- 


- A2L 


.EQ S3E 








003F- 


■ A2H 


.EQ i3F 








0042 


A4L 


-EQ $42 








0043- 


- A4H 


,EQ $43 








* 




'SECTOR' IS DEFINED AS RIGHT AFTER PROGRAM, 


* 


* 






BUT CAN BE PLACED ELSEWHERE INSTEAD 


* 






.OR 16006 












.TF OBJ. RAMFORMAT 







s& 
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mm 


A0 00 FORMAT 


LDv nm 


CREATE BLAMK SECTOR 


6002 


A9 00 


LDA nm 


FOR 2ND (LAST) CAT SECTOR 


6004 


99 93 60 .1 


STA SECTOR, Y WIPE OUT 256 BITTES | 


6007 


C3 


INY 




6006 


D0 FA 


SNE .1 




600A 


A9 00 


LDA #100 




500C 


85 42 


STA A4L 


POINT TO RAHDISK'S 


500E 


A9 IE 


LDA #J1E 


TRACK $11. SECTOR $E 


6010 


35 43 


STA A4H 




6012 


20 7E 60 


JSR MOV IT 


HOVE THE 'SECTOR' TO AUXRAH 


6015 


A9 11 


LDA #J11 


1ST CATALOG SECTOR: 


6017 


BD 94 60 


STA SECTOR+1 


POINT TO SECOND SECTOR 


601A 


A9 0E 


LDA #$0E 


IN CAT CHAIN 


601C 


m % 60 


STA SECTOR+2 




501F 


A9 0a 


LDA #$00 


POINT TO TRK $11, SECT JF 


6021 


85 4Z 


STA A4L 




6023 


A9 IF 


LDA #S1F 




6025 


85 43 


STA A4H 




6027 


20 7E 60 


JSR HOVIT 


COPY THE SECTOR 


602A 


A9 0F VTOC 


LDA #$0F 


POINT TO 1ST CAT SECTOR 


602C 


SO 95 68 


STA SECTOR+2 




682F 


A9 03 


LDA ^03 


DOS VERSION 


6031 


80 96 G0 


STA SECTOR+3 




6034 


A9 FE 


LDA WFE 


DISK VOLUME 


6036 


8D 99 60 


STA SECTOR+5 




6039 


A9 7A 


LDA *($7A 


122 SECTORS PER T/S LIST 


603B 


8D SA 50 


STA SECTOR+S27 | 


603E 


A9 11 


LDA #tll 


LAST TRACK ALLOCATED 


604Q 


8D C3 60 


STA SECTOR+S30 (NEXT TRACK IS $12) | 


6043 


A9 01 


LDA mi 


DIRECTION OF TRACK ALLOCATION 


6045 


80 C4 60 


STA SECT0R+$31 | 


6048 


A9 23 


LDA mi 


PRETEND DISK HAS J23 TRACKS 


604A 


80 C7 60 


STA ££CTOR+$34 | 


604D 


A9 10 


LDA *S10 


16 SECTORS PER TRACK 


604F 


SD C8 50 


STA SECT0R435 


6052 


EE CA 60 


INC SECT0R+$37 256 BYTES PER SECTOR 


6055 


A9 3F 


LDA nSF 


ALLOW USE OF TRACK $11 


6057 


80 0F 61 


STA SECT0Rti7C | 


605A 


A9 FE 


LDA «$FE 




605C 


80 10 61 


STA SECT0R+$7D | 


605F 


A2 12 BITMAP 


LDX ni2 


SHOW TRACKS $12-$ IB AS FREE 


6061 


SA .1 


TXA 


CONVERT TRACK NUH TO OFFSET 


6062 


0A 


ASL 


-MUL BY 4 BYTES PER TRACK 


5063 


0A 


ASL 




6064 


A8 


TAY 


HJT IT IN Y 


6065 


A9 FF 


LDA nFF 




6067 


99 CB 60 


STA SECT0R+$38,V 


606A 


99 CC 60 


STA 3ECT0R+$39,y 


606D 


EB 


INX 




606E 


£0 IC 


cpx niz 


DONE? 


6070 


00 EF 


BNE .1 


CONTINUE IF NOT 


6072 


A9 00 ' . . 


LDA #500 




6074 


85 42 


STA A4L 




6076 


A9 10 


LDA «10 


TRACK $11, SECTOR |0 


6078 


85 43 


STA A4H 




607A 


20 7E 60 


JSR HOVIT 


WRITE SECTOR 


607D 


60 


RTS 


DONE!!!! 


607E 


A9 93 HOVIT 


LDA #SECTOR 


SET IflOVE PARAMETERS 


6080 


85 3C 


STA AIL 


AU30URCE START 


6082 


A9 60 


LDA /SECTOR 




6084 


85 3D 


STA AlH 




608G 


A9 92 


LDA ttSECTOR+$FF A2=S0URCE END | 


6088 


85 3E 


STA A2L 




608A 


A9 61 


LDA /SECTOR+JFF | 


60eC 


85 3F 


STA A2H 




608E 


38 


SEC 


MAIN TO AUX 


603F 


20 11 C3 


JSR HOVE 


CALL THE MOVE ROUTINE 


6092 


60 
SECTOR 

.EN 


RTS 


AND RETURN TO PROGRAM 



controller is preferable. Make a permanent 
version of Super JOB foi' that purpose, and 
remove the unused routines in it. If you copy 
a normal floppy to RAM, the RAM wilJ contain 
a VTOC that allows writing to illegal sectors. 
To avoid this, first copy the RAM disk to a 
floppy disk, THEN you can write to ttiat floppy 
without trouble. 

I have attempted to make this program as 
flexible as possible so thai you will have little 
trouble customizing it for your own purposes. 
Watch your step, but have fun! 



L 



COMPUTIST Ko. 38 



Hexduiiip nil RAMDISK 




(and installer) 




6000 


38 AD 00 9D E9 A9 8D 00 


SD144 


5003 


9D AO 01 9D E9 00 8D 01 


SA4E2 


6010 


9D 18 AD 00 9D 69 25 85 


S3F51 


5018 


3C AD 01 9D 59 00 85 3D 


$12A0 


6020 


A0 A9 B9 39 60 91 3C 88 


iFB8D 


6028 


C0 FF D0 F6 A5 3C 8D B8 


$E226 


5030 


B7 A5 3D 8D B9 B7 4C D3 


$691E 


5038 


03 84 48 85 49 A0 01 BI 


S120B 


5040 


48 C9 30 F0 0F A5 49 A4 


SBB6B 


6048 


4S 4C 00 BD A9 40 A0 0D 


S2730 


6050 


91 48 38 60 A0 0F 91 48 


S6CE1 


5058 


A0 0D A9 00 91 4S A0 02 


$C918 


5060 


Bl 48 C9 01 D0 E6 A0 10 


S822F 


5068 


91 48 A0 0E A9 FE 91 48 


SC272 


5070 


A0 04 Bl 48 C9 11 90 D4 


$45D4 


6078 


C9 IC B0 D0 A0 06 61 48 


$8ECE 


5080 


29 F0 D0 C8 A5 42 48 A5 


$B149 


6088 


43 48 A0 04 Bl 48 BA 0A 


$0F58 


5090 


0A 0A C6 11 48 85 3D A9 


JA724 


6098 


00 85 3C Aa 08 Bl 48 85 


S3SD8 


60A0 


42 C8 Bl 48 85 43 A0 0C 


$8889 


50A8 


Bl 48 F0 34 C9 03 B0 9C 


$49A2 


60B0 


C9 01 F0 10 A5 3C A6 42 


SIBDD 


60B8 


85 42 86 3C A5 3D A6 43 


SDDFB 


60ce 


85 43 86 3D 18 A9 FF 65 


S99CA 


50C8 


3C 85 3E A9 00 55 3D 85 


S008F 


6000 


3F A0 0C Bl 48 C9 02 20 


S98B6 


60D8 


11 C3 68 85 43 68 85 42 


$73D3 


50E0 


18 60 


$C59D 


Hexdump #2: RAMFORMAT 


6000 


A0 00 A9 00 99 93 60 C8 


$A753 


6008 


00 FA A9 00 85 42 A9 IE 


ieBE5 


6010 


85 43 20 7E 60 A9 11 8D 


J84B5 


6318 


94 60 A9 0E 8D 95 50 A9 


$CCA2 


6020 


00 85 42 A9 IF 85 43 20 


J488A 


6028 


7E 60 A9 0F 8D 95 60 A9 


$3025 


6030 


03 8D 96 60 A9 FE 8D 99 


$1A81 


6038 


60 A9 7A 80 BA 60 A9 11 


$4 IBS 


6040 


8D C3 60 A9 01 80 C4 50 


$5C51 


5048 


A9 23 BD C7 60 A9 10 80 


$9E5D 


6050 


C8 60 EE CA 60 A9 3F 8D 


$4E9D 


6058 


0F 61 A9 FE 80 10 61 A2 


$C6AD 


6060 


12 8A 0A 0A A3 A9 FF 99 


$6916 


606B 


CB 60 99 CC 60 E8 E0 IC 


$C2CE 


5070 


D0 EF A9 00 85 42 A9 10 


$1157 


6078 


85 43 20 7E 60 60 A9 93 


$19D6 , 


6080 


85 3C A9 60 85 3D A9 92 


$FEC5 ' 


6088 


85 3E A9 61 85 3F 38 20 


$6C32 


6090 


U C3 60 


$D861 
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Boulder Dash 

I & II 



by Randy R. Abel 



Electronic Arts 

1820 Gateway Drive 

San Mateo. CA 94404 

Rtquirements: 

Apple //e or equivalent 

A blank disk 

A sector editor 

Fust copier (Ujt'ksmith or cquiv.) 

Boulder Dash is one of the most fun games 
I own Originally marketed by Micro Fun uiid 
now by Elccironic Arts, it now includes a new 
Boulder Dash II. For those of us that do not 
have the Boulder Dash by Micro Fun, I will 
add the softkey to allow a depiotected copy of 
both games. Boulder Dash I is on the front side 
of the diskfitte and Boulder Dash II is on the 
batk. 

Electronic Ans' copy protection techniques 
have always made the an of depi'otecting u 



challenge. Their method used on Bouldei Dash 
resembles the technique used on most of the 
other games such as Sky Fox, Ajchon IL and 
Adventure Construction Set. This method, as 
it was called in COMPUTIST No. 2 1 , is Track 
Imaging. That is, track S5.5 is an exact image 
of track 1^5, and because track imaging is very 
hard to reproduce on a standard Apple 
compatible disk drive we need a way around 
the protection. 

To start with, I needed to find out how close 
to normal the address and data markers were 
so I pulled out Locksmidi's fast copier and tried 
a quick check. To my surprise, Locksmidi's fist 
copier picked up all tracks except track $6, we 
don't need to worry about this track so ignore 
the error on track $6, The same process can 
be done to the back side with the same 
indications. Now diat we have a disk to pluy 
with we can put away die original. 

Just for fun I tried to boot the copy but, as 
you can guess, it did not get very far and staned 
doing weird things. The next thing to check is 
location $AOM, In all of Electronic Arts' 
programs so far $A000 has always been the first 
check. We can get by this point by making a 
quick sector edit. With any sector (I used 



■rarBrBFCB 



if^i*^j^4f^^v^<^#a®# 



^•^ 















^i 



»###J 



:-Hf5*?!!! 



Inspector), read track $01, sector S0C, You will 
find a S4C at byte $00 To bypass this first 
chec-k change die value to a $6(3. Now any jump 
subroutine to $A0O0 will retarn after doing 
nothing. If you try to boot after this change it 
still begins to do weird things after a bit. This 
is because tliere is a check done just before 
jumping to the routine to make sure that no 
changes have been made. To get around this 
check we need to make another change at track 
$01 sector $7. Here we look at Ijyte $FF and 
find a ?0F. Changing diis to $82 will cornea 
the checksum and allow the boot to proceed all 
the way to the point of selecting either the Apple 
joysdck or a Joy port. The process of finding 
the right value to correct the checL'sum is very 
lengthy and need never be done agjiin unless 
the initial boot is changed. 

After selecting the device used for play the 
drive starts up again and does another check. 
At this point 1 reset into the mocutor. A 
di.sassembly at $13EB wdl reveal: 



13EB- 


A9 14 




IDA HI4 


13ED- 


43 




PHA 


13EE- 


A9 04 




IDA «04 


13F0- 


8D 07 


14 


STA $1407 


13F3- 


09 FB 




ORA fi$FB 


13F5- 


8D 06 


14 


STA J 1406 


13FS- 


A9 00 




IDA *l$00 


13FA- 


EE 06 


14 


INC S1406 


13FD- 


D0 03 




BNE SI 402 


13FF- 


EE 07 


14 


INC $1407 


1+02- 


EE 05 


14 


fNC }1405 


1405- 


4C 05 


14 


JMP $1406 


1408- 


CE 05 


14 


DEC $1405 


U0B- 


AC 07 


14 


LDY S1407 


140E- 


C0 07 




cpy #$07 


1410- 


D0 Eg 




BME $13FA 


1413- 


AC 05 


14 


LDY » SI 406 


1415- 


C0OF 




CPV «SDF 


U17- 


00 EJ 




BNE #S13FA 


1419- 


49 4E 




EOR «4E 


141B- 


09 2B 




ORA #$2B 


141D- 


48 




PHA 


UlE- 


A9 04 




IDA n04 


1429- 


48 




PHA 


1421- 


A5 4F 




IDA n4F 


1423- 


45 4F 




EOfi #S4F 


1425- 


IS 




CLC 


1425- 


E9 00 




SBC «$00 


1428- 


48 




PHA 


1429- 


B0 01 




BCS $142C 


142B- 


60 




RTS 



(!) 
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For tfaose who warn to Jmow whal is 
happeiiii)g here, read on. If you want to figure 
it oui for yourselves, skip this paragraph. Tlie 
rouline puslies $14 on the stack ro make the high 
byte of the return address somewhere in the 
$1400 range. From $13EE to SI 41 8 they are 
EORing the range from $0500 to $a7DF, then 
at $1419 weseeEOR tfUB. If you Exclusive- 
OR a value with itself, the end result will be 
zero. $4E is the value we find for the $0500 
to S07DF range. The next thing that happened 
is un OEIA #$2B. Since the accumulator had 
3 zero we wound up with the $2B. this will be 
the low order address (minus one) the routine 
will return to. The next part pushes S&4 and die 
$FF on the stack. Can you figure out how this 
is done'.' The branch on carry set fails and is 
executed, Wheie will the routine return to? 
Right, $8500. This is where the next eheck is 
done for the track image. This check ends with 
a RTS. so where is it going to return to? Right 
again, $142CI 

There is no useful data returned to the 
program in this routine, so why can't we just 
jump over all diat mess and get on with the 
game? We can by placing at S13EB a JuMP to 
$142C ($4C 2C 14). To do this we need another 
sector edit. To speed things up I search tlie disk 
with the Inspector for the CORE Disk Searcher) 
for die sequence $A9 14 48, To uiy surprise 
it was not encrypted and Inspector found the 
pattern. The only thing left to do is make the 
change and try again. To save you time, there 
are two places on the disk where this routine 
Is found, so search the whole disk before you 
try booting the disk again. 

Now you you have Boulder Dash 1 liherated 
from the copy protection. Boulder Dash 11 is 
just as easy. Make the first sector edit just like 
Boulder Dash I, (change track sector 1 byte 
$FF to a S92, und track 1 sector SC byte .?0fl 
to a $6B). Next search the disk for $A9 15 48. 
You will find two places that need to be 
changed. This tune we will put at $1561 a jump 
to $15A2. Check at $1561 and you will find 
almost the same routine. 

I made the following changes on my disfcs: 
Track Sector Byte From To 



BD 1 SI 


S7 


$FF 


S0F 


102 


$1 


SF 


%m 


HC 


S60 


to 


S4 


SEB 


SA9 


S4C 


M 


S4 


SEC 


114 


i2C 


,1b 


14 


$ED 


$48 


514 


$E 


$C 


iEB 


m 


I4C 


SE 


tc 


$ec 


m 


$3C 


SE 


SC 


SED 


S48 


$14 


BO ii 11 


$7 


SFF 


S0F 


S02 


u 


*F 


m 


$4C 


560 


"-•■ $D 


$2 


$61 


$ft9 


$4C 


$0 


%2 


S62 


il5 


tA2 


JD 


12 


S63 


S48 


$15 


JE 


SA 


$61 


JA9 


SC 


If 


%^ 


$62 


115 


SA2 


•' $E 


5A 


$63 


$48 


$15 



An update to the softkey for.. 



Hard Hat Mack 



by Briaa Troha 



Requirements: 

Hard Hat Mack softkey 

(Issue No. 5 or Book of Softkey s I) 

After softkey ing Hard Hat IVlack (see "Boot 
Code Tracing Hard Hat Mack," COMPUTIST 
No, 5), I .started U»king into the program code. 
There are a total of six calls to the protection 
routine. The first is taken when die game is 
staned, while the other five are taken during 
The run of the demo. After each JSR $43 D4 you 
wiU find a STA $xxx\. This is done to scramble 
the game if you put a RTS at S43D4. Otherwise 
the program pulls the return address from the 
stack and adds dirce to it (thu.s "jumping" over 
the STA command), pushes it hack on, then 
pushes two more values onto the stack so it 
returns to &$(!)&. One possible way to fix this 
is to pull the la.st value off the stack, add three 
to it and return. The following code will do dii.s: 



4034:68 


PU 


pul 1 it off 


4035:18 


CLC 


ready for add 


4036:59 03 


ADC #sm 


adcf three to it 


4038:48 


PHA 


put it bacti 


4039:60 


RTS 


dona, return 



The other thing we could do is eliminate the 
jumps to the code altogether. After the first call 
and STA uislruciion theie is valid program 
code, while after all the others there is an RTS. 
'fo eliminate the jumps we would do the 
following: 

864i EA EA EA EA EA EA 

in4:ee 
nn-.m 

UDSM 
5F32M 
79A8:«0 

Now there are no jumps to the protection so 
we can overwrite all the memory from $3000 
to $3FFF (sixteen free pages). After a little 
work you would find the memory from $2A00 
to S2FFF, $200010 S21FF, and $2310 to $23FF 
are all free. If you put your move routine at 
$2310 you can save twenty -four pages of 
memorv'. FoUtiw the procedure In the original 
article up lo step 13, then; 

14) Do a few memory moves: restore page .W8 
to its original location, then pack high memory 



into the free area mentioned above. 

8e«<34e».34FFM 

2A9e<7FBfl.94rFM 

2«8e<7Dee.7EFFM 

15) Type in a memory move routine to move 
it all back. 

23i»:A» m B9 flfl 2A 99 ftfl 7F 
2318:C8 DO F7 EE 14 23 EE 17 
2329:23 EA 17 23 Eft 95 DH ES 
2328:Ae m B9 99 29 99 m 7D 
233e:B9 m 21 99 »« 7E C8 Dtt 
2338:F1 (A 

16) Fix tlie start of die game and set up for some 
APTs. 

Sm-.m 23 16 28 94 22 4C 2D 

msi-M m m m 

17) Change the routine thai sets up the reset 
vector to point to the monitor. 

2213:69 
2218:FF 

18) Save die tile to disk. 

BSAVE HARD HAT 
MACK,A$8e9,L$760» 

Mow to do any of the following APTs just 
hit Reset and you wUl be in the monitor. You 
can use one or ail of the APTs to practice the 
game or to help master one single level. After 
doing an APT restart the program with S2DG 
then play the game. For ihe entire game: 

1 . Number of men to start (do not exceed $80) 

A72:xA 
2- Immune to D.SHA and Vandals 

5C40:69 
3, No Bonus countdown 

5810:69 

For first level: 

1. Can't fall down holes 

95C:EA EA EA 

2. No rivets from machine 

1669:69 

For second and third levels: 

Immune to crunchers (not includiug "vice 

jaws" on second level) 

5A2A:69 
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softkey for... 



The Other 



by Dick Meikle 



Tom Stiyder Prmtudions. Inc. 

123 Ml Auburn St. 

Cambridge, MA 01238 

Requirements: 

48K Apple ][ Plus and up 
Super lOB 1.5 or sector editor 
One blank disk 
Disk search utility (optional) 

You are the national leader of one of tJie two 
great powers in the world. You must manage 
your ecnnnmy for maximum prosperity, 
compcif witii the other world power for scarce 
resources, maintain the sacurity of your nation, 
and build a bridge to world peace. You soon 
discover that these goals, difficult to achieve 
individuiiily. are nearly unattainable when taken 
together. 

This is the scenario for The Other Side, a 
global conflia resolutions simulation created by 
Tom Snyder Productions. Designed primarily 
for use in a classroom environment, this 
program presents its participant.^ with the 
challenge of managing events in a simulated 
"world" where negotiation and overcoming 
conflict are the only sure way to "win" the 
game. The "world leaders" may approach the 
game from eitliet a contpeiilive ur collaborative 
strategy. The simulation may run on a single 
computer or, ideally, on two computers in 
separate locations so that the players cannot be 
certain what ihe "other side" is planning. All 
communications between nation.s take place 
over a "Hotline" link, via modem or 
inexpensive cable (available from Tom Snyder 
Productions). Currently one of the hottest pieces 
of educational software. The Other Side was 
ance featured on NBC's Today program which 
n;portcd a simulation carried out by high school 
classes in America and Europe linked by 
modem. 



The Protection 

When a disk is used uround children, even 
15 to IS years old, it is not a very good idea 
to Lise an origiual disk. Although The Other Side 
comes with a backup, Murphy's Law being 
what it is, 1 prefer using an easily backed up 
and unprotected copy. 

The first copy program 1 try when making 
a backup is COPYA. Sometimes, even in tliis 
copy prolecled world, this works. Not this time. 
Using COPYA on this prognun gives a "cannot 
read error". With the first step out of the way 
1 turned to EDD III. I not i ceil when copying 
track $1 1 that the track was mostly ShFs, This 
is a good indication of a nibble count. I tried 
the manual nibble count on track SI 1 but this 
did not yield a very reliable copy. It would not 
boot eveiy time. Armed with my Apple //e and 
Wildcard I decided to bypass the nibble count. 

The Wiideard gives me the ability to stop the 
booting process during the nibble count. I 
booted the original after wrilc-protccting it (I 
take no chances). If there is one thing you will 
read time and again in COMPUTIST it is to 
listen to your drive when it is booting. I stopped 
the boot with the Wildcard when 1 heard the 
drive head move to track .fl 1 . This telLs where 
in memoiy the nibble count is taking place. 

Looking at the code in memory, it appeared 
that die nibble count routine started at %24idQ). 
The first three bytes were .$4E K3 34. I got out 
my disk search utility and scitrehcd for diese 
three bytes. I found them on track $lft sector 
$0 Starling at byte SO0, but the rest of the sector 
seemed to be garbage. I rebooted the original 
to take another look at the code, it was then that 
1 noticed that the code at $2400 was self- 
modifying. The apparent garbage alters itself 
to make executable code. .Starting at $2400 each 
instmctiou alters the next until it reaches 52412. 
At it24 19 each byte from $24 IF through S24FF 
are (ROR) ROtated onebil Right and at S241P 
the same thing happens to memory locations 
$2500 through $25FF. 





(after 


decoding) 


2400- 


LSR $2403 


decode next step 


2403- 


ROR J 2406 


I" II ri 


2406- 


ROR $2409 


U 11 II 


2409- 


ROR 12419 


" elsewhere 


240C- 


ROR S240F 


" next step 


240F- 


ROR 52415 


" elsewhere 


2412- 


TXA 


save current X 


2413- 


LOX #S1F 




2415- 


ROR $241D 


decode a step 


2418- 


CLC 


sel carry bit to 


2419- 


ROR mm,K 


decode 


241C- 


INX 


many 


241D- 


BME $2419 


bytes 


241F- 


ROR S2500,X 


decode 


2422- 


INX 


more 


2423- 


BNE $24 IF 


bytes 


2425- 


TAX 


restote X 


2426- 


LDA $02 


push locations 0-2 


2428- 


PHA 


on stach 


2429- 


LDA $01 




242B- 


PHA 




242C- 


LDA $00 




242E- 


PHA 




242F- 


STX $02 


save X 


2431- 


JSR S253B 


set up zero page 


2434- 


LDV M2e 


«< Insert JuMP«c 


2436- 


LDA «22 




2438- 


JSR S24C4 


Start n-CDunt 


243B- 


LDA $mcj 


read byte 


243E- 


BPL $243B 




2440- 


PHA 


waste 


2441- 


PLA 


time 


2442- 


CMP *$D5 


is it a $05? 


2444- 


BNE $2438 


start again if rot 



The Softkey 

The actual nibble count starts at $243 B. If 
the count b not correct the program will branch 
to S24B6 and crash. If no error occurs the boot 
continues at $24A0. All that is needed to do is 
put a IMP $24Afl at $2434 so the boot will 
continue. This does not seem too difficult. Just 
change the bytes starting at $24,'i3 to 4C A0 24 
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Side 



(JMP $24A0), Bui. remember, the code from 
track $1« sectnr SM is altered at $2419. The 
bytes will be RORed. So bytes $3-'i-S16 on track 
$18 sector $0 must be changed from $4B 40 
41 52 to $4A 99 40 48. Note (hat I changed 
four byte.s rather than three. This is because 
$4A {81001010 inbinaiy) and $4B (WlffllBl ]) 
both rotated right will give qs a S25 at $2433. 
However, when $4B is rotated it causes the 
rightmost bit to be moved into the "carry" of 
the status register. Then when the byte S99 is 
rotated, the bit placed in the carry frwm ilie last 
rotation will be moved into the byte. That would 
give a WC (IITOIIM bin.) A0 24 (CPY 
$24A0) instead of $4C (01001 100 bin.) AM 24 
(JMP S24AB) at S2434. This is the sector edit 
mude by the conti oiler at the end of this article. 
The controller formats the copy and copie.s 
tracks S0-$10. makes the sector edit on track 
$10, then copies tracks $12- $22. The JuMP 
cannot be placed earlier because the stack and 
zero page must be set before liie jump can be 
executed. 
The sector edits made by the controller are: 

Track Sector Byte From To 



m 



$0 



m $4B S4A 

$34 $40 S99 

$35 $41 540 

$35 $52 548 



Step by Step 

1) Type in the controller below. 

2) Install the controller into Super lOB 1.5. 

3) RUN Super lOB and answer Yes to the 
Formatting option. 

That's all there is to it. You have just de- 
protected The Other Side. 

On each disk the sector arrangement may be 
different. If this does not work on your copy 
you will need a disk search utility. Make a copy 
with any copier that ignores disk errors {such 
as Locksmith Fast Copy, Disk Munchcr, etc..) 
and search for the hex bytes $4B 40 41 52. 
Change them to $4A 99 40 48. Write the sectoi 
back to tile copy. If you want to make the disk 



completely COPYAabIc, use a nibble copier to 
copy track $11 of a DOS 3.3 disk to ihiK disk 
(but don't use it to store anything). 

controller 

1000 fiEH OTHER SIDE CONTROLLER 

1010 TK=0 ;LT^17 :ST=15 :LS-15 XD^tlR ;FAST 

= 1 
1020 G03UB 490 GOSUB610 
1025Tl = TK ;TK=PEEK (TRK) - 1 ; RESTORE : GOSUB 

310 :TK = T1 
1030(;OSUB498 : fiOSUB610 : IF PEEK (TRK) =LT 

THEN 1050 
1040 TK = PEEK (TRK) :ST = FEEK (SCT) : GOTO 1020 
1050 IF PEEK (TRK) = 17THENTK=18 .LT = 35 : GOTO 

1020 



1060 HOME -PRINT "COPV DONE" ; END 

1100DATA4'CHANGES 

1110 DATA 16 .0 ,51 ,74 

1120 DATA 15 .0 ,52 ,153 

1130 DATA 16 ,0,53 ,64 

1U0DATA16 ,0 .54 ,72 

controller checksums 



000 - 53566 

010 - $3873 

020 - $7BFA 

025 - $7025 

030 - S03CS 

040 - S89FF 

050 - S26F8 



1060 - $4D61 

1100 - $0164 

1110 - 13607 

1120 - $0a3C 

1130 - $5A4S- 

1140 - $4EBB 



i 



Prepare for a close-up of area 21 




II i« ' 'tl 



•>» 



COMPUTIST Mo. 38 



27 



7 



«>!i, 



Big Bother's DOS... 



Looking Into 



by Stephen L. Favor 



Editor's note: We were going to print this 
article in an earlier issue, i>ut when we redevpA 
a real live softkey far FU^hi Simulator II 
(COMPUTISTNo. 36), we put tiiis one. (which 
tsrs'l a full sqflkey) on the back burner. We feel 
it can provide some useful information oftyway, 
so here it is. 

In the Gray House, tJie leader of serious 
AppJe users takes the Etand. "Ladies and 
geatlemen, friends and foes, I am pleased tg 
announce I have just enacted legislation that 
outlaws Flight Simulator n. We begin hacking 
immediacely!" 

The Iron Curtain 

1 must compliment the writers of Flight 
Simulator's (FS-H) DOS. It is not a modified 
version of 3.3 hut totally new and foreign. It 
forms a very nice (for SubLogic) or disgusting 
(to me) wall between FS-II and its users. Here 
is a short tutorial of what this monster does and 
how it docs it, 

FS-Il doesn't store data as sectors but as a 
single track, Each time routines arc called in 
tills ReadAVrite Track (RWT) program, it seeks 
the proper track, looks for a header in the 
format $92 94 XX (XX being unique for each 
track), and reads $1A00 bytes of 6&2 encoded 
data to a buffer (S2600) in hi-res page one. 
Then, $1000 bytes are decoded and stored from 
$2600 to $35FF. "What happens from that point 
depends on the routine that was called. 

For the curiou."! mind, here's how data is 
stored on the disk itself. The first $1500 bytes 
are written in a S15 by S10B matrix. See the 
example below and disassemble the code at 
S23D9 once you have RWT for a bener 
understanding. Then, $500 bytes of sequential 
data follow, and diat's it. How simple can it he? 

Example 1: $15 by $100 information matrix. 
All values are given in hex. The top row is the 
high byte and the first column is tlie low byie 
of a location within the RWT buffer where 
infomiation is stored. Tliese two numbers index 
the sequential location on the disk of the byte 
[hat will he stored in thier address, e.g. The 
locatjon $3902 will rccicve byte number $3E 



from die disk. Or byte $]4C2 from the disk will 
be stored at $27FD. 



xx 



page 

$£6xx 27xx 28xx .... 3Sxx 39xx 3Axx 



m m2 m&i mm .... am mn m^ 

01 0015 0015 0017 ... 0027 0028 0029 

02 002A 002B 002C ,.., 0fl3C 003E 003F 



FD 14C1 14C2 14C3 
FE 14D6 I4D7 14D8 
FF 14EB 14EC 14E0 



1403 14D4 14D5 
14E8 14E9 14EA 
UFD i4FE 14FF 



There are seven subroutines that can be called 
to send data to and frotn tlie disk. They all are 
entered by a jump table (serie."; of JuMPs) 
beginning at $1EAI). Here's a list of them und 
what they do. 

$1EAD- JHP S203A j'RDO" 

This routine reads a Quarter of the $1000 
decoded bytes from the buffer to the address 
stored at $1E03,4. The quarter number ($1E01) 
is from $00 to $87. The first quarter of track 
one being $00 and $87 the last of track $22. 
More on deciphering this number later. 

UEB0- JMP S2015 ;"WRQ" 

Exactly the same as RDQ except it writes the 
quarter number at $1E0! to die disk from the 
address at S1E03,4. 

$1EB3- JHP S20AF ; "RDT" 

This jump is used only once, and the write 
routine that goes with it is never called. It goes 
beyond the decoded data in the buffer and 
deciphers a $150 byte "tail" of its own. There 
is one tail on each of tracks $01-22 totaling 
$2CA0 bytes, all of which are loaded into the 
language card, if there is one, during die boot. 
The number of a tail is its track number minus 
one. 



tlEB6- JHP $2122 
Never called. Forget it. 



;"WRT" 



J1EB9- JHP $238A :C:RASH 

It's code like diis Uiat up.5cts mc somewhat. If 
I'm correct, this one wiil simply replace the data 
on every other track with $FDs starting with 
track $02. 



SIEBC- JHP $2000 idrive off 

I1EC4- ;"LDRWT" 

Home disk arm and load RWT to $2000. 

All that is left now is die lOB table beginning 
at $IE00. BeJow is a list of what each byte 
represents. 

ilE00: Drive no. 

SlEfll: (Juarter: $00-87, $00 being tlie 
first quarter of track J01 aid 
S87 the last of track $22, Also, 
Tai I no. from $08 to $21. Add 
one to obtain track no. 

$lEa2: ' 

$1E03: Low byte of destination address 

$1E04: High byte of destination address 

$1E05; ? 

$1E06: ? 

$1E07: 0=4BK, U64K 

$1E0S: Slot no 

$l£fl9-lE0C: Used by the track seeking 
routine. 

$1E0D: Ttiird rrark of header. Each track 
has a different header. All calls 
set this byte to the correct value 
according to the contents of $IE01. 

$1E0E- 0=no error. The program will lock 
up at 1000 feet if this doesr't 
equal ^ero. 

$IE0F: ? 



Beyond The Iron Curtain 

Let'.'; put this information to use now. and 
put FS-D on a normal (3,3 format) disk. 

1) Boot FS-U. 

2) The third time you hear the disk arm 
recalibrate (the grinding noise), press Reset. 
You don't need a modified ROM or anything. 

3) Boot a slave disk (don't use 
Control/Open- Apple/Reset !) . 

4) BSAVE FS-n.RWT, A$200O, LSeW, 

5) Type in the Super lOB contmller (you can 
ignore what comes after the REMs) and run it 
to move FS-O to a blank disk. 

Now you have everytliing you need to give 
you a splitting head-ache! 

About That Weird Boot 

The Boot ROM loads a $100 byte program 
and jumps to S801 as usual. Then, a three page 
block is read to $1D00 and execution transfers 
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there. Te is here that the unique sound of this 
boot appears. The disk arm homes for the 
second time and loads RWT to $2000, and 
quarters $22 Uirough S24 (track $09, sector $08 
to track $0A, sector $03 on the deprotected 
disk) are stored to $A7E0. 

After a pair nf jumps, execution end.? up at 
the last stage of die boot, SAA4D. The main 
routines this lioal stage uses are: 

J1EC4: Home disk arm (for the third time) 

and reload MT to $2000. 
$AM5; Read quarters $00-06 to $0200, 

and quarters $07-19 to $6000. 
SABB5: Read quarters IlA-21 to J2000, 
$AC9B: If 64K, load taiis $00-21 

to SD000. S8B2=0i. 
$A71C: Loaded by $AAA5. Urn off dislt 

drive and copy lii-res page two 

over tii-res page one. 
SAD26; Replace zero page. 
SACD0; If S8B2 isn't zero, dodify 

for 54K version. 

You will also notice an abundance of the 
command "BCS $AA70," If any of these 
branches occurs, the ominous error trap (JSR 
$1F89) thai blanks the screen and displays 
several numbers at the top left of the CRT will 
be invoked, The rest of the routines display the 
opening messages and don't seem to do any 
error checking. 

Finding A Quarter 

Bciow is a short assembly routine that will 
set up the track and sector for a given quarter. 
Call it and read the next four sectors, and you'U 
have the quarter. The formulas used arc: track 
=^ int (quarter + 4) / 4 and sector = (quarter 
* 4 + 3) AND $eF 

(Note: the program performs the "AND" 
before adding three in case the carry flag was 
set when the first shift was performed.) 

IDA QUARTER ;(LDA $1E01) 

CLC ;Adjjst so quarter $00 

ADC am ; will be Trk $01. Set $00 

LSR ; D i V i de 

LSR ; by four 

STA TRACK ; to get track no. 

LDA QUARTER ;(LDA S1E01 again) 

ASL iMultiply 

ASL ; by four 

AND ammim ; and use bits 2 and 3 

CLC 



ADC ff$03 
STA SECTOR 



iPius $03 

; for sector number 

Final Comments 



So, if 1 know so much, why don't I finish 
the depiotection scheme? Well, I may, but I 
don't have the assurance that I wiU have the time 
or the patience. 1 still want to see this one fall, 
and I'm not greedy for fame. So all of you out 
there who have some extra time (a lot of it.'). . . 
Here are some tips that might help you do it. 

Probably the most difficult problem will be 
Finding a place for DOS. There are only three 
blocks of memory unused that I can find. 
S1E0O- IFFF is free except for the DOS jumps 
from SIEAD to $1EC6. Pointing these jumps 
to code that imitates RWT would work nicely 
because all calls arc made via dicsc addresses. 
Remember, SIEOE maiit equal zero at all times. 

The second pocket is where RWT resides in 
the language card (64K version). It starts at 
SD3D0 (SD(M0 to $D3CF may be free a]so) 
witii u series of jumps presumably (you belter 
check before you mes.s with them) unimportant 
once RWT is unhooked. Last, bank one of the 
language card can be used if you modify or 
delete die course plotter. It's the only place I 
found any reference to bank one, but I don't 
know to what extern it is used. 

Above all, remember that the more memory 
you change, the greater the chance you have 
of being found out. Be sneaky and tiy to put 
your new code in places Big Bother would never 
think of looking, 

controller 

50 Hi MEM: 7167 : GOTO 10010 : REM HIMEH JUST 
BELO»* m BUFFER WILL STAST AT 
$4000 LEAVING ROOM FOR EIVE TRACKS. 
1000 A$ = "If^SERT" DISK" W/FS-I I ,RHT" : GOSUB 
470 ; PRINT CHR$ (13 ) CHR$ (4 ) "BLOAD" 
FS-II.RyfT":REM LOAD m. IT WILL USE 
ALL OF HI -RES PAGE ONE, 
1 010 AS = " I NSERT" FS- 1 1 " ; GOSUB 4 70 
1020 POKE 7424, 174: REM 1D00- "LDX" (S1E08 
). LOAD X-REG WITH SLOT NUMBER 
INSTEAD OF STORING SLOT NUMBER, 
1030 POKE 7438 ,0 : POKE 7443 ,64 ; REM 1D0O- (LOA 
) "#S00" AND 1D12- (LDA ) "n40" . THE 
COMMAND IMMEDIATELY FOLLOWING EACH OF 
THESE COMMANDS STORES THE NUMBERS AS THE 
TARGET BUFFER AT IE ,4. 



104gDATA'96 ,152 .0 ,181 ,0 .157 ,0 ,28 ,202 
,208,248,32,0,29.162,0.189,0,28,149 
,0 ,202 .208 ,248 ,96 
1050 FOR I = 7469 TO 7493 : READ X : POKE I , X : NEXT 
:REH SHORT PROGRAM BEGINNING AT 1D2E 
TO SAVE AND RESTORE THE ZERO PAGE , 
RESPECTIVELY, SO CALLING 1D00 WON'T 
CLOBBER 1X>S. CALL THIS PROGRAM FOR 
ALL READS FROM THE FS-ll DiS 
I060T = 1 

1070 POKE 7448 ,T ^ 4 - 4 ; POKE 7466 , (T + 5 

)*4-4: IFT + 5>34 THEN POKE 7466 

.34 * 4 - 4 : REM 7448 = STARTING 

QUARTER, 7466 = ENDING (JUARTER. SET 

TO READ 20 QUARTERS , OR FIVE 

TRACKS, 

1080 CALL 7470 : REM 1D2E 

1090 VL = :CD = RD : GOSUB490 : P0KE8UF ,64 ; 

REM WRITE IT TO NORMAL DOS 
1100 FORTK = T TO T + 4 : I F T + 4 > 34 THEN FORTK 

= T TO 34 
1 1 10 FOR ST = TO IS : GOSUB 100 : GOSUB 430 : NEXT 

: NEXT 
1120T = T+5 : IFT<35 THEN 1070 : REM CHECK 

FOR LAST TRACK 
2000 POKE 7481 ,175 : POKE 7482 ,32 : REM 1038- 
(JSR) "$20AF" . MODIFY TO GET TAILS. 
2010 POKE 49385 ,0 : POKE 49386 ,0 : REM DRIVE 
#1 ON, BSAVE IN LINE 2050 WILL 
TURN IT OFF. 
2020 POKE 7681 .0 . POKE 7583 ,0 , POKE 7684 ,64 
:REH START WITH TAIL #0. BUFFER AT 
$4000. 
2030 FORT = 1 TO 34 . CALL 7470 . NEXT ; REM READ 

34 TAILS [ALL OF THEM), 
2040 A$ = "INSERT' SLAVE' DISK" : GOSUB 470 
2050 PRINT CHRS (13 ) CHRI (4 ) "BSAVE" 
FS-II.D000,A$4000,L$2CA0" REM 
SAVE THE TAILS. 
2060 END 



controller checksums 


60 - $7FB5 


1100 


- S75A9 


1000 - $9AE2 


1110 


- S5F0B 


1010 - $C06F 


1120 


- $2A92 


1020 - $18BA 


2000 


- $05AI 


1030 - $9DEE 


2010 


- $C970 


1040 - $FBC7 


2020 


- SCB93 


1050 - $62D5 


2030 


- SEE85 


1060 - $3242 


2040 


- $47E0 


1070 - iD313 


2050 


- $4355 


1080 - $D60£ 


2060 


- $BD83 


1090 - $E81A 




* 
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ESSENTIAL DATA DUPLICATOR 

Back up your copy-protected disks with wlien ordfiring direct BA standard EDO 

Essentia! Data Duplicator 4 PLUS. ■ version whicti doesn't include any liarc 

EDO 4 PLUS is lew technology, not just ware is available, and can be used on AppI 

"another" copy pragram. Tfie EDD 4 _^.3,a,„. Ilcand III (usiia emulations mode) an 
PLUS program uses a specially, 
designed hardware card which i 
works with yojr disk drives to 
Dack up disks by accurately 
copying the bits of data from 
each track. Don't be fooled . . . 
no otiier copy program/system 
for Apples can do this! ■ Inaddi- 

tion to backing up disks. EOD 4 PLUS ' mdaiciudfu aim vtsa 

includes several uaetui utilities such as orders must be prepaid. ' 

examining disk drives, certifying disks, dis- " 

playins drive speed rpm's, plus more! ; 
■ EOD4PLUSrunsonApplell.llPlus 
(including most compatibles), and lie, ■-' :■ 
. and is priced at $129.95 (duodisk/uni- 

a^disk 5.25 crwners must add $15 lor a |;Va < i UJILICO MICROWARE 
' —pecial cable adapter). Add $5.00 '^''"'^- 
($8.00 loreign) ship /handling ' 






when ordering direct BA standard EDO 4 
version which doesn't include any hard- 
ware is available, and can be used on Apple 
a„.^ lie and III (using emulations mode) and 
;i:. is priced at $79,95. Add $3.00 ($6,00 
^■■;:'-; foreign) ship /handling when 
;'■;: ordering direct, ■ If you own 
,v% an earlier version, send us 
! ;i,> your EDD disk and deduct $50 
^W ^from your order ■ Ask 
^'' tor EOD 4 PLUS at your local 
computer store, or order direct. 
Mastercard and Visa accepted. Ail 
orders must be prepaid. ■ In addition, 
registered owners may purchase EDD^ 
|pnnted 6502 SOURCE CODE listing for 
I educational purposes, 

UTILICO MICROWARE 

r 3377 SOUND AVE., SUITE 352 
NAPA, CA 94558/(707) 257-2420 
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Does copy protection 
have your hands tied? 



BACKUP YOUR SOFTWARE WITH 
LOCKSMITH 6.0 ". 

Locksmith, the controversial copy program tfiat 
took itie Apple world by storm in 1961, has evolved 
from a powerful Oit-copy programmed into a 
comptete dis(( utility system, allowing the Apple user 
10 recover crastied disks, restore accidentally 
deleted files, and perform hardware diagnostics on 
the disk drive and memory boards. The NEW 
Locksmith version 6,0 is now available and includes 
an advanced disk recovery utility, a framing-bit 
analyser, an automatic bool (racer, a sector editor, 
many file ulililies, and of course, tine most povi^erful 
bit-copy program available. A fast disk backup utility 
copies disks in eight seconds flat. Improvements to 
Locksmith Programming Language have made it 
more powerful and easier to use lor you to vifrite 
your ovi^n backup and repair procedures. Includes a 
library disk wtiicti contains automatic procedures to 
copy hundreds of Apple programs. 

Locksmith requires no additional tiardware, but 
will use any additional HAM memory that it linds, 

mcludmg RAtVl boards Irom Applied Engineering 
and Checkmate Technology, 
Don'1 get caught with your hands tied. Order 
Locksmith 6,0 today, 



NEW LOW PRICE S79.96 
Registered Locksmith 5 own< 



: to version 6 for S29.95. 



Available from your computer dealer or directly from: 

' Alpha Logic Business Systems, Inc, 
41 19 rioitti Union Road 
Woodstock. IL 60098 

, (815)568-5166 ffi 

■■ AlphiJ L^qic Business. Svslemi in.: i9B5 ' — 

LocJtsmiihi and Locksmith PC arrr f^ai^i^fec) If^deniarks oi Alpha Locnc 




APPLE® 

PROGRAMMERS 

PUBLISH WITH 

Uf^TTME 



THE DISK MONTHLY 



Gain national prominence with America's 
leading montlily disk publication. (We 
werethefirstto publish Bill Travers!) If 
you are either an Apple II or IVlacintosh 
programmer...you won't find a better 
way to publish your work than through 
UpTlme, The Disk Monthly We seek sub- 
missions for both the Apple II series and 
the Macintosh computers. 

Call: Bill Kelly at 1-800-437-0033 today 
Or, write to Bill at UpTime, 174 Bellevue 
Avenue, Newport, Rhode Island 02840. 
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Neu> Uei sion, Improved and Easier to use! 



i 



Senior 
Prom 






to the Senior PROm! 

version 3.0 

Examine, modify, and baclcup your 
Apple //e and //c soffu/are! 

The Senior PROff is a hardware det'ice wiih deprotection 
uHlities instantly ai'aiiabie from an^ program. Including: 

■ Enter the Monitor to examine op change memory. 

■ Display where in memory the program was running. 

■ Disassemble, I'iew or sai'e any memory, ep-en $00-7FF. 

■ Display the Stack tor return subroutine addresses. 
■Instantly switch between iwo different SHk programs. 
After interrupting a program and examining or altering 
memory, the program may be instantly restarted. Or it 
may be saved to disk in normal B-files &< later restarted. 
The Senior PROH also has a sophisticated Sector Editor 
and Memory /Disk Detective, and its own DOS with disk 
copy, -format, edit, and protected disk utilities,all without 
booting a disk first! Assembly Language utilities include 
Step and Trace, an assembler, and more. Undetectable 

by software or hardware, does not use a peripheral slot. 
Extensile documentation and guide to copy protection. 
Economically priced at $79.95 for prepaid orders with 
check or money order. Credit card orders ai^ailable for 
$89.95. Specify //c, or //c standard or enhanced ROMs. 

For 



pmnn; 



visAj orders call 317-743-4041, 10-5 E.S.T. 



313-349-2S 



Mc 






Cutting ^dge Enterprises 

4323E4 Ren Cen Station, Detroit, Ml 48243 



Back Issues & Library Disks order form 



Issue 



38 

37 

36 

35 

34 

33 

32 

31 

30 □ n □ 



Mag Di${i Both 
M.7B S9.95 $12.95 

□ □ □ 

n □ □ 

□ □ □ 

□ □ □ 

□ .p n 

□ n n 
nan 

□ □ □ 



□ □ □ 

□ □ □ 

□ □ □ 

□ □ □ 

□ an 

□ □ □ 

NA □ NA 



29 

28 

27 

26 

25 

24 

23 

22 □ n n 

21 NA n NA 

20 a □ □ 

19 □ □ □ 

^8. . . ^^^ w . . . . NA □ NA 
^-V 17 . . . □ .□ □ 

16. □ □; n' 

♦ Book of Softkeys Vol 3 . ... 

15 NA □ NA 

14 NA U NA 

13 NA □ NA 

12 NA □ NA 

11 NA □ NA 



S19.96 



J 



NA 
NA 
NA 
□ 
NA 



□ 
□ 



NA 
NA 
NA 

□ 
NA 



J 



•Bool! of Sottkeys Vol 2 

lO 

9 

8. ....... . 

^^ 7 ...... . 

6 

•Booli of Softkeys Vol 1 SI 4.95 

4 

3 

Core 2 

2 

1 

Core 1 

Core 3 

Computing 3. . . 

Best of Haidcoie Comimting . NA IZ] NA 

• Core Special SlO.OO- . . I I 

(All three CORE magszinea) 



Special "Both" disk &magazinecombination orders apply 
to one issue and its corresponding dislc- Prices shown are 
for U.S., Canada, and Mexico only. 
Some di5l(5 apply to mors than one issue and are shown 
as taiier boxes. 

A- Bool? 01 Softkeys volumes do not come with disks. 
-i^c We have a limited supply of these issues. 



NA 




NA 


NA 




NA 


□ 




□ 


NA 




NA 


□ 




□ 


n 




CI 


□ 


□ 


□ 


[~\ 


NA 


NA 



BACK ISSUES and 
LIBRARY DISKS of 

COMPUTIST are still available. Library disks are 
available for ALL issues, even for issues that are no longer 

available (marked fiA). 

LIBRARY DISKS 

are perfect companions 

for COMPUTIST 

Docutnentation for each Library Disk is in 
the corresponding issue. 

Send me the back Issues and/or library disks indicated: 

Narrs ADtt 



Address 
City 



State 



Zip 



Country. 



_Phone_ 



_Exp.. 



Signature . 



_CP38 



HOLIDAY SAVINGS! 

C Yes, I Viiant to tai<e advantage of the special back issue prices indicated on the Holiday savings 
page, l understand that the saie price is SIO for 3 issues. (Foreign orders $20/3 issues) 

r i want to tal<e advantage of the special library disit prices. I understand the holiday price is 
5 disl^s for $30. (Foreign orders add $5 shipping & handling). I understand that I will receive a free 
color coded case with each set of 5 library disks ordered. 

C I want to take advantage of the library disk and magazine combination prices. I understand 
the holiday price is $9.95 per set, $3 off the regular price. {Foreign shipping add $3). 

L My order is over $100.00. I would like to take advantage of your special offer and receive a 
n free Core Special or a 
D free COf^PUTIST T-shirt. MENS SIZE: XL L M S 

{T-shirts will be supplied while quantities last. In the event your size is not available, a Core 
Special will be supplied.) 

Sendcheckormoneyofderto: COtUIPUTIST POBox110846-T Tacoma, WA 98411. Mostordersshlpped 
UPS 50 please use street address. Offer good while supply lasts. In Washlngtot) state: add 7.G1t sales tax. 



Back Issue Rates For Foreign Orders 



Canada anti Mexico back-issue and libiary disk rates aie identical to U.S. First Class unless otherwise specified. 
Othei Foieign: Piice for each magazine includes shipping. 
1 - 2 copies 3 to 4 copies 5 or more copies 



$14.25 each 



$13.25 each 



12.25 each 



Other Foreign disk rates are Si 1.94 each (includes shipping). Special "Both" disk and magazine 
comtiinations shown do NOT apply to Foreign orders. However, Foreign Subscribers can take 
advantage of our NEW Combination Library Disk and Magazine subscription rates. 

Book Of Softkeys: Volume 1: $17.95 Volume 2: $22.95 

US funds drawn on US banks. All foreign orders sent AIR RATES. 



Description of Available Back Issues 



Seftkeys | Under Fire | Pegasus ][ | Take 
1 (tevisital) | Flight Simulator D vl.05 (pan 2) I 
Readers' Sofikiys | Magic Slate | Alter Ego | 
Rendezvoas I Qmctcen I Storj I'ree I Assembly 
Liuiguag^f Tutor [ Avulun Hill gEimc^ | Dark Crystal [ 
Feaiures | Playiug Karateta on a Ik \ Tracic Finder ] 
Sylt to Dif 1 Care | Breaking la; tips for beginners ) 
Copy j[ Rtis 6.0: a review ] The tX)S Alicrer I .... 



S^ib^s I nighl SidiulalQT II v LOS | 
AuioDud I Readers' Sofikeyi \ Ctiticd Reading I 
Troll's Tale | Robot War 1 Gene nil Manager I 
Plasmaniii | Tclaiiura Software I Kiiiwriler vl,U | Color 
Me I Fealurfs \ KcrssnWriter meets Flasllcard | The 
Bus Muiutm 1 Mousepainf for noH-Apples | Cpre | The 
Bard's Dressing Rotim i Advanced Piwiing TecMqum \ 
Championship Lode Runner | „„.„„,„..,„„„,,,,,., 



Snfikeyx \ Hi-res Cribbage | Olympic 
E>ceathlo!i ] Revisiting?- 15 Strike Eagle | Masquerade | 
The Hohbii I Readers' Sofikeys I Pooyan I The Perfect 
Score I Alice in Wonderland I The Money Manager t 
Good ThinJJng | Rescue Raiders ! Feaatre | Putting a 
New F8 on Vour Langaage Card | Cure \ Ejpluring 
PniDOS hy instaUng a CPS Clciei Driver | 



Safilwiis I Crisis Mountain | Terripiii 
Ijigo I Apple I/ign n I Fishies 1.0 | S|ieliWorki | 
Gumtall I Readers ' Siifib^'x \ Rescue at Rige! | Crazey 
Mazey 1 Conan | Perry Mason: Tie Case of the 
Mandarin Murder | Koronis Rifl I Feiitttre I More ROM 
Running | Core \ Infoeuin Revealed | 



Sojikcys I Woni Juggler | TinkI Tonk! | 
Sundog v2.0 I G.I. Joe & Lucas Film's Eidolon | 
Summer Gaines II [ Thiel | instant Pascal | World's 
UreulBsl Foolbull Gums | Ri'odiTu ' Svjtkeyn 1 Graphie 
.^dvfinturie #1 { Seu.^ible Grammar & Extetided 
BookentJs I Chipwils | Hardball | King's (Juest n i The 
World's Greatest Baseball Game I Feamre \ How to be 
dK' Sound Master | Con \ The Mapping of Lfltima IV | 



Sofikeys I Revisiting Music Constjuction 
Set I Cubit I Saudville Software | Hartley Sofiware | 
Hndge | Siarly Gnnies lur Young ChiWren | i'awala's 
Last Raloubl | RcihIit!. ' Siifii lyx I Print Shop 
Companitiii i Krackiiig Vol H I Moehius | Mouse 
Budget. Mouse Word & Mouse Desk | Adventure 
ConsiructJon Set | Feaiure | U.slng Data Disks With 
Mierozines I Co«! I Super lOB vl.5 a Reprint I ..,„ 

3 1 Sofikeys \ Trivia Fever | The Original 
Boston Computer Diet | Lifesavcr | Synergistic 
Sollware | Blazing Paddles | Zardas | Readers 
S/ifikeys | Time Vme | Tycoon | Eirlhly Delights 
Jingle Disk | Crystal Cevetns | Kufete Ctuimp 
Femurs I A Little Help Widi The Bard's Tale | Core 
Black Box | Unresirietcd Ampersand | 



Sofikey.'! I Threshold | Checkers v2.I | 
Miciotype | Gen. & Orpnic Cbemisoy Series | Uptown 

Trivia I Murder by the Dozen | Readers ' Sapkpyy \ 
Wuulliam's Class it;.'; I Batter Up 1 Fveiyn Wood's 
Dynamic Reader 1 ienny of the Prairie | L^am About 
Sounds in Reading | Winter Gaines | Feature | 
Customising the Monitor by Adding 65C02 
Disassembly | Care \ The AtiistJitor | , 



Sojiktys I Ultima IV | Robot Odyssey | 
Rendezvous I Word Attack & Gassmate I Thre* frora 
Mindscape | Alphal)etic K.eyboarding | Haciter | Disk 
Dirwlui I Lude Runnel | MIDIM I Reudert ' Siifikfys | 
Algebra Series | Time is Money | PiLstop H ( Apventme 

10 Attaniis | Feaiure \ Capturing the Hidden Archon 
Editor I Corf | Fingerprint Plus: A Review ] Beneath 
Ecyont! Casdc Wolfenstcin (pan 2i | 



Sofikeys I Microzincs 1-5 I Mierozincs 
7-y I Microzines i alternate method) I Phi Beta Fder \ 
Sword oFKada^h [ Rrittkrs' Sirjikeys \ Anutlier Miner 
2(WDeT I Learning With Furaywnmp | Bnnkends j 
Apple I JJgo n I Murder on tbe 2indemeilf | Fealtires \ 

Daltks: Exploring Artificial Intelligence | Malcing 32K 
Of 16K Slave Disks I Core I The Games of 19S5; part 

ni 



Sojiksys 1 Cannonball Blitz | Instant 
Reeal! | fjessler Spanish Software | More Stickybeais | 
Reader s ' Stijikeys | Financial Cuuktiook | Super 

ZaxKon I Wizardry | Preschool Fun 1 Holy Gritil | 
Inca I I28K Zamm \ Feature \ PioBdit | Core \ Games 
Of 1985 pan 1 1 



1 ^9 Readers ' Softkeys I Rendezvous With 
Rama | Feaclitree's Back To Basits Accijunltng System | 
HSD StiilKtits Series | Arillinieticktc | Aridimekicks and 
F^rly Ciarnes ftir Children | Features | Double Your 
RDM Sjace | Towards a Better F8 ROM I The Nibbler; 
A Utility Program to Examine Raw Nibbles From Disk I 
C^re I The Games of 1984: In Review-pan 11 | 

^L ^E Sr.iftkii\'\ \ The Print Sbnp 1 Cros.swocd 
Magic I The Standing Stones | Beet Run | Skyfbn | 
Random House Disks I Features \ \ Tutorial For Disk 
Inspection and the Vse Of Super lOB | S-C Macro 
Assembler Directives (reprint) | Core | The Graphic 
Grubber For The Print Shop | The Lone Catalog 
Arranger V 1.0 Part 2 I 

1 ^t Sofikey | Sensible Speller for ProDOS 
Sideways | Readers' Safikeys \ Rescue Raidcn | Sheila 
Basic Building Blocks I Artsci Programs I Crossfire 
Feature I Secret Weapon; RAMcard ', Cure \ The 
Conimller Writer | A Fix For The Beyond Castle 
Woifenstein Sofikey I The Lone Catalog Ananger 
Part 1 1 .' 

~M Scftkeys I Zaxxon I Mask of the Sun | Crush | 
Crumble & Chomp | Snake Byte | DB Master | 
Mouskatlack | Features I Making Liberated Backups 
Tliat Retain Their Copy Protection | .S-C Assembler; 
Review | Disk Directory Designer | Con \ Corefiler; 
Pan I I Upper & Lower Case Output for Zork | .,., 

1 Sofikeys \ Data Reporter | Multiplun | Zork | 
Feoturet I FARMS for Copy n Pins | No More Bugs 1 
APT's for Choplifter & Cannonball Blitz | 'Capycard' 
Reviews I Replay | Crackshot ,' Snapshot | Wildcard | 



5ojike\s I DB Master 4.2 | Business 
Writer I Barron's Computer SAT | Take 1 I Bank Street 

Speller | Where In The World Is Carmen Sandiega | 
Bank Street Wnler 128K I Word C:hallKnge | Readers' 
Sfjlkfiy^ I Spy^s Demi.se | Miird Prober i BC's Quest For 
Tires | Early Games | Homeword Speller | Feature \ 
Adding IT THEN EILSE To Applesoft 1 Core I DOS To 
ProDOS And Back I 



Games: 



Sofikeys \ Elcctmnic Arts software 1 
Grolier software (Xyphus | F-15 Strike Eagle | Injured 

Engine | Readers' Sofikeys \ Mr. Robot And His Robot 
Factory | .Applectilin II | Alplwhel Zoo | Fathoms 4(1 1 
.Story Milker | Fariy Games Matchmaker | Rnlmls Of 
Dawn I Feaiure \ Essential Daia DupIicalor copy 
parms | Core | Direct Sector Access From DOS I .. 



CORE 3 

Constructing Your Own Joystick | Compiling Games I 
GAME REVIEWS: Over ?!0 of llic iatcsl and best | Pick 
Of The Piick: Ail -time TOP 20 games | Destructive 
Forces i EAMON | Graphics Magician and 
GraFORTH | Dragon Dungeon | 

CORE 2 Utiiites: 

Dynamic Menu | High Res: .Scroll Demo | GOTO 
Label; Replace | Line Find | (Juick Copy: Copy [ .. 



Stifikeys I Miner 2M9er | Lode Runner i 
A2-PBI Pinball | Readers' Sofikeys | The Heist | Old 
Ironsides I Grandma's House I In Search of die Most 

Amazing Thing f Morlm^'s Tower | M;rr;iuder | Singon 
ID I Features \ Customized Drive Speed Control | Super 
lOB version l.S | Core \ The Macro System | 



Sofikeys I MiUlonaire | SSI's RDOS | 
Faaiavision | Spy vs. Spy I Dragonworld | Readers' 
aofikeys \ King's Quest [ Mastering the SAT | Easy as 
ABC I Space ShutUe I The Factory | Visidcn I.IE I 
Sherlock Holmes | The Bards Tale | Feaiure \ 
Increasing Your Disk Capacity | Core | Ullunater IV, 
an Ultima IV Character Editor [ 



Sofikeys \ SargonHI | Wizardry: Proving 
Grounds of dK Mad Overiord and Knight of Diamonds ] 
Reader' Sofikeys I The Report Card VI. I | Kidwriier | 

Feature \ Af^le J| Boot ROM Disassembly ; Core \ The 
Graphic. Grablier v.t.O | Cupv U+ 5 0; a' Review I i'he 
Know-Di'ive: A Hardware Evaluation | An Iniproverl 
BASIC/fiinaiy Comho | 



1 Graphics: 

Memorj' Map | Text Graphics: Marquee ' Boxes I 
Jagged Scroller | Lovr Res; Color CIninicter Cluirt j 
High Res' Screen Cmncher [ The UFO hietory I 
Color 1 Vector Graphics; Shimmering Siiapes | A Shape 

Table Mini^Ediior | Block Graphics; Arcade Quality 
Graphics for BASIC Programmers i Animation I .... 

Hardcore Computing 3 

HyperDOS Creator | Menu Hello I Zyphyr Wars | 
Vector Graphics [ Review of Bit Copiers | Bool Code 
Tracing | Softkey lOB | Interview with 'Mike' 
Markkula I 



For special savings, 

consult our 
^Holiday Specials Ad' 



The 



Super lOB 



vTlfk 




~^- 



• What could possibly be better than receiving COIVIPUTIST every month, typing in the Super iOB controllers and 
deprotecting your favorite software? How about having all the controllers ever printed in COMPUTIST at your fingertips? 
With The Super IOB Collection Volumes I & II, you have just that and more, — 

• Each volume (supplied on a DOS 3.3 disk) contains at least 60 Super IOB controllers including the standard, swap, 
newswap and fast controllers. In addition, each disk has the Csaver program from COMPUTIST No. 13, But wait! You 
also get version 1 .5 of Super IOB and a menu hello program that lists the avaiiabie controllers and, when you select one, 
automatically installs it into Super IOB and RUNs the resulting program.* 

• Several of the controllers deprotect the software completely with no further steps. This means that some programs 
are only minutes away from deprotection (with virtually no typing). 



• The issue of COMPUTIST in which each controller appeared 
a particular program.f 



Volume 1 



> 



Volume 1 of the Super lOfe collection covers all 
the controllers appearing in COMPUTIST No. 9 
through No. 26. in addition, the newswap and fast 
controllers from COMPUTIST No. 32 are 
included. The following 60 controllers are on 
volume 1: 

Advanced Blackjack, Alphabet Zoo, Arcade Machine, 

Archon II, Archon, Artsci Software, Bank Street Writer, 

BaiTonfi SAT, Reycnd Castle Wolfenstein, BSW //&: 

Loader, Castle Wolfenstein, Computer Preparation: 

SAT, Dazzle Draw, DB Master 4 Plus. Death in the 

Carribean, Ditto Eggs, DLM Software, Elcetronic Arts, 

F-15 Strike Eagle, Fast Controller, Fathoms 40, 

Financial Cookbook, Gessler Software, Grandma's « 

House, The Heist, In Search of the Most Amazing 

Thing, Instant Recall, Kidwritcr, Lions Share, Lode 

Runner, Masterly pe, Mateh Maker, Miner 2049cr, Mi nit 

Man, Mufploi, Newsroom, Newswap controller, Penguin 

Software, Print Shop Graphic Library, Print Shop, 
Rendezvous with Rama, Rockys' Boots, Sargon in. Sea 

Dragon, Shiela, Sky fox. Snooper Troops, Standard 

eontroller. Stoneware Software, Sunnmer Games, Super 

Controller, Super Zaxxon, Swap Controller, TAC, 

Ultima HI, Word Challenge, Xyphus, Zuaaoii 



is indicated in case further steps are required to deprotect 



Volume 2 

Volume 2 of the Super IOB collection covers all 
the controllers appearing in COMPUTIST No. 27 
through No, 38. The following 65 controllers are 
on volume 2: 

Alice in Wonderland, Alphabetic Keyboarding, Alternate 

Reality, Autoduel, Checkers, Chipwits, Color Me, 

Conan.data, Conan.prog, Copy DOS, Crisis Mountain, 

Disk Director, Dragonworld, Early Games, Easy as 

ABC, F-15 Strike Eagle, Fantavision, Fast controller, 

rishies. Flight .Simulator, Halley Projexrt, Hartley 
Software (a), Hartley Software (b), Jenny of the Prarie, 
Jingle Disk, Kidwriter, Kracking Vol 11, Lode Runner, 
LOGO U (a), LOGO U (b). Masquerade. Mastering the 

SAT, Microtype: Tlie Wonderful World of Paws,, 

Microzines I, Microzines 2-5, Miner 2049er, Mist & 

View to a Kill , Murder on ihe Zinderacuf , Music 

Construction Set, Newswiip controller, Olympic 

Decathlon, Other Side, Phi Beta Filer, Pitstop □, Print 

Shop Companion, RDOS, Robot War, Spy vs Spy, 
Standard controller, Sundog V2, Swap controller, Sword 
of Kadash, Synergistic Software, Tawala's last Redoubt, 
Terripin Logo, ThreKhold, Time is Money, Time Zone, 
link! Tonk!, Troll's Talc. Ultima IV. Wiicicmcss, Word 
Attack & Classmate, World's Greatest Baseball, World's 
Greatest Football 



To Order; Send $9.95 for each volume or $1^.95 for a complete package thai includes: both disks, a reprint of "Disk Inspection and 
the use of Super IOB" and COMPUTIST No. 32, U.S. funds drawn on U.S. banks. Foreign orders (other than Canada or Mexico) add 
20% shipping, Washington state residents add 7.8% sales tax. Mail ofdcrs to: Super IOB Collection; FOB 1 10846; Tacoma, WA 984 1 1 

r I 

*Rcquires at least 64K of memory. i 

t Although some controllers will completely deprotect the program they were designed for, some will not and therefore require their 
corresponding issue of COMPUTIST to complete the deprotection procedure. 



